Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.chrischall/opentable-mcp

NPM · OPENTABLE-MCP · SCANNED SEP 21

OpenTable reservation management: find slots, book, cancel, list reservations, manage favorites.

Available components

+26 this week 90 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security100
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 3 of 19 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to chrischall/opentable-mcp). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 0 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability58
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 3832 tokens (~273/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
  • Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage90
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 70% of tool parameters carry a description.Partial
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "opentable_remove_favorite" implies "remove" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Install

How do I install the io.github.chrischall/opentable-mcp server?

io.github.chrischall/opentable-mcp runs locally as an npm package, launched with npx -y opentable-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · opentable-mcp

# add to Claude Code
claude mcp add chrischall-opentable-mcp -- npx -y opentable-mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "chrischall-opentable-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "opentable-mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "chrischall-opentable-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "opentable-mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add chrischall-opentable-mcp -- npx -y opentable-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "chrischall-opentable-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "opentable-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add chrischall-opentable-mcp --command npx --arg -y --arg opentable-mcp
# ~/.hermes/config.yaml
mcp_servers:
  chrischall-opentable-mcp:
    command: "npx"
    args: ["-y", "opentable-mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "chrischall-opentable-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "opentable-mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add chrischall-opentable-mcp -t stdio -c npx -a -y opentable-mcp
// mcp.json
{
  "mcpServers": {
    "chrischall-opentable-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "opentable-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 21 Sept 26 +1
    • Package version: 1.1.0 → 1.1.2 functional
  • 20 Sept 26 +11
    • Known CVEs: unverified → pass security
    • Dependency health: unverified → 0.96 functional
    • MCP protocol: Implements a current MCP spec version (2026-07-28). functional
    • Package version: 1.0.0 → 1.1.0 functional
  • 19 Sept 26 −10
    • Stability: 0.87 → unverified security
    • Known CVEs: pass → unverified security
    • Tool safety: pass → unverified security
    • Capabilities: pass → unverified functional
    • Dependency health: 0.86 → unverified functional
    • Tool coverage: 100 → unverified functional
    • Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. functional
    • Package version: 0.19.5 → 1.0.0 functional
  • 18 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 16 Sept 26 +12
    • Malware scan: unverified → pass security
    • Stability: pass → 0.80 functional
  • 15 Sept 26 +11
    • Malware scan: unverified → pass security
    • Known CVEs: unverified → pass security
    • Stability: 0.97 → pass security
    • Security disclosure: pass → unverified functional
    • Dependency health: unverified → 0.86 functional
    • Package version: 0.19.4 → 0.19.5 functional
  • 14 Sept 26 −25
    • Stability: 0.93 → unverified security
    • Malware scan: pass → unverified security
    • Known CVEs: pass → unverified security
    • Tool safety: pass → unverified security
    • Capabilities: pass → unverified functional
    • Dependency health: 0.86 → unverified functional
    • Tool coverage: 100 → unverified functional
    • Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. functional
    • Package version: 0.19.3 → 0.19.4 functional
    • Package version: 0.16.3 → 0.19.3 functional
  • 13 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 21 Sept 2026 · Analysed npm/opentable-mcp@1.1.2

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo chrischall/opentable-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/chrischall/opentable-mcp/.github/workflows/release-please.yml@refs/heads/main
Rekor log index 2904960974
Predicate type https://slsa.dev/provenance/v1
Subject digest sha512:41d8e8a5c0d7ccc612bb5178a8dd169839a6a805391f6101f4ad05bd7a2472a4551082150478c8ce569f0377ed4cc99f171f599125a2752ed1484095c

Background: How many MCP packages publish verified provenance →

Dependencies 19 packages
Packages resolved 19
Stale 3
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 14 exposed · ~3,832 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
opentable_add_favorite ~29

Add a restaurant to the user's Saved Restaurants list.

NameTypeReqDescription
restaurant_idintegeryes

No output schema declared.

No examples provided.

opentable_book ~615

Book an OpenTable reservation. Requires a fresh slot_hash + reservation_token from opentable_find_slots (tokens expire within minutes — call find_slots just before book). dining_area_id is OPTIONAL: when omitted it's auto-resolved to the default dining area from OpenTable's booking-details page, so find_slots → book works without a separate opentable_get_restaurant call. For CC-required slots (prime-time at busy restaurants), opentable_book refuses without a `booking_token` from opentable_book_preview — the preview step surfaces the cancellation policy and the saved card that would be held. Auto-fetches the user's profile (name/email/phone) from /user/dining-dashboard. Returns confirmation_number + security_token; save both — they're required to cancel. For Listing-type restaurants there's no slot to lock — callers should check `opentable_get_restaurant.bookable` first and surface the restaurant's phone/URL instead. Without confirm:true this returns a dry-run and makes NO booking; re-run with confirm:true to commit.

NameTypeReqDescription
booking_tokenstringOpaque token from opentable_book_preview. REQUIRED for CC-required slots (book will refuse otherwise). Optional for standard slots — when present, skips a redundant re-lock.
confirmbooleanMust be true to proceed. Without this, the tool returns a preview.
database_regionstringOpenTable's sharded-database region for the restaurant. Defaults to 'NA' (North America). Pass the venue's region (e.g. for UK/EU/APAC restaurants) when booking or cancelling outside North America —…
datestringyesYYYY-MM-DD
dining_area_idintegerOptional dining-area (room) id. When omitted, auto-resolved to the default dining area from the booking-details page — no opentable_get_restaurant call needed. Pass explicitly only to pin a specific…
experience_idintegerTamper-check signal for Experience tokens. When set, must match the experienceId baked into the booking_token by preview — agents that re-state the experience choice here get refused if it drifted fr…
experience_idsarrayPass-through from find_slots.experience_ids. When non-empty, book refuses without a booking_token from opentable_book_preview.
party_sizeintegeryes
reservation_tokenstringyesslot_availability_token from opentable_find_slots
restaurant_idintegeryes
slot_hashstringyesslot_hash from opentable_find_slots
timestringyesHH:MM (24h) — must match the slot returned by find_slots

No output schema declared.

No examples provided.

opentable_book_preview ~521

Preview an OpenTable booking BEFORE committing. Fetches the /booking/details SSR page and the slot-lock to surface: the cancellation policy (including any credit-card no-show fee), the saved payment card that would be charged/held, and a short-lived `booking_token` that opentable_book consumes. REQUIRED for CC-required slots — opentable_book refuses to commit without the token. Safe to call for standard slots too (the token skips a redundant re-lock in book). Holds the slot for ~60-90s; preview → book should happen within a minute. For Listing-type restaurants (Le Bernardin, etc.) this tool can't fetch a slot at all — callers should check `opentable_get_restaurant.bookable` first and surface the restaurant's phone/URL instead. For Experience-mandatory slots (find_slots returned booking_type=experience_mandatory), pass `experience_id` from the slot's `experience_ids` to route through the Experience slot-lock.

NameTypeReqDescription
database_regionstringOpenTable's sharded-database region for the restaurant. Defaults to 'NA' (North America). Pass the venue's region (e.g. for UK/EU/APAC restaurants) when booking or cancelling outside North America —…
datestringyesYYYY-MM-DD
dining_area_idintegerOptional dining-area (room) id. When omitted, auto-resolved to the default dining area from OpenTable's booking-details page — so you can go straight from find_slots to book without calling opentable…
experience_idintegerFor Experience-mandatory slots: which experience to book (from slot.experience_ids). Required when find_slots returned an Experience slot.
experience_idsarrayPass-through from find_slots.experience_ids. When non-empty, experience_id must also be set.
party_sizeintegeryes
reservation_tokenstringyesslot_availability_token from opentable_find_slots
restaurant_idintegeryes
slot_hashstringyesslot_hash from opentable_find_slots
timestringyesHH:MM (24h) — must match a slot returned by find_slots

No output schema declared.

No examples provided.

opentable_cancel ~221

Cancel an OpenTable reservation. Requires restaurant_id, confirmation_number, and security_token — all three come from opentable_list_reservations or opentable_book. Without confirm:true this returns a dry-run and takes NO cancellation action; re-run with confirm:true to cancel the reservation.

NameTypeReqDescription
confirmbooleanMust be true to proceed. Without this, the tool returns a preview.
confirmation_numberintegeryes
database_regionstringOpenTable's sharded-database region for the restaurant. Defaults to 'NA' (North America). Pass the venue's region (e.g. for UK/EU/APAC restaurants) when booking or cancelling outside North America —…
restaurant_idintegeryes
security_tokenstringyes

No output schema declared.

No examples provided.

opentable_find_slots ~428

List available reservation slots at a specific OpenTable restaurant for a date + party size. Returns each slot's reservation_token (use it with opentable_book — tokens expire quickly, book promptly). Slots may be attributes=['default'|'bar'|'highTop'|'outdoor'] and type=Standard|Experience|POP. You can pass a slot's reservation_token + slot_hash straight to opentable_book without a separate opentable_get_restaurant call — book auto-resolves the dining area. (OpenTable's availability response carries only the seating category, not the numeric dining-area id, so that id is resolved at book time from the booking-details page.) If this errors with "operation ... not yet observed on this tab", open any OpenTable restaurant page in your browser once (the graphql bridge needs to see the page's own availability query fire first), then retry.

NameTypeReqDescription
database_regionstringOpenTable's sharded-database region for the restaurant. Defaults to 'NA' (North America). Pass the venue's region (e.g. for UK/EU/APAC restaurants) when booking or cancelling outside North America —…
datestringyesYYYY-MM-DD
party_sizeintegeryes
restaurant_idintegeryes
timestringyesHH:MM (24h) — anchor time; slots come back relative to this
viewstringResponse shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"…

No output schema declared.

No examples provided.

opentable_get_profile ~128

Get the authenticated OpenTable user's profile: name, email, phones, loyalty points and tier, home metro, member-since date. Payment and credit-card details are never exposed.

NameTypeReqDescription
viewstringResponse shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"…

No output schema declared.

No examples provided.

opentable_get_restaurant ~270

Get full details for a single OpenTable restaurant: cuisine, price band, description, address, hours, phone, payment options, features, rating/review count, and availability_token (used internally when booking). Accepts the numeric restaurant_id, a slug, a path, or the full URL from opentable_search_restaurants — passing the search result's "url" verbatim always resolves, including legacy venues served at /{slug} instead of /r/{slug}.

NameTypeReqDescription
restaurant_idyesNumeric restaurant_id (as returned by opentable_list_reservations / opentable_list_favorites), slug ("state-of-confusion-charlotte"), path, or full URL from opentable_search_restaurants. Passing the…
viewstringResponse shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"…

No output schema declared.

No examples provided.

opentable_healthcheck ~122

Round-trips a small public www.opentable.com URL (/robots.txt) through the fetchproxy bridge and returns diagnostics: the bridge's role (host/peer/null), port, version, the extension link (linked / pair pending / not attached / never answered), the elapsed round-trip time, and a plain-English hint distinguishing 'bridge never came up' from 'extension not connected' from 'real www.opentable.com-side problem'. Read-only, no auth required. Call this when a real tool fails and you want to know which hop broke.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

opentable_list_favorites ~128

List the user's saved restaurants from OpenTable (Saved Restaurants list). Returns each entry's id, name, cuisine, neighborhood, price band, rating, and OpenTable URL.

NameTypeReqDescription
viewstringResponse shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"…

No output schema declared.

No examples provided.

opentable_list_reservations ~138

List the authenticated user's OpenTable reservations. Defaults to upcoming; pass scope="past" or scope="all" to broaden. Each entry includes the security_token needed to cancel or modify.

NameTypeReqDescription
scopestring
viewstringResponse shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"…

No output schema declared.

No examples provided.

opentable_modify ~427

Modify an existing OpenTable reservation in place. Requires the existing reservation's identity (restaurant_id + confirmation_number + security_token) plus a fresh modify_token from opentable_modify_preview — preview is mandatory because the new slot's cancellation policy / CC re-hold can differ from the original. Submits /dapi/booking/make-reservation with isModify: true + the existing confirmation_number + security_token; OpenTable preserves confirmation_number across modifies but may regenerate reservation_id and security_token. dining_area_id is OPTIONAL — the modify_token already carries the area opentable_modify_preview resolved; pass it only to restate it (mismatch is refused). Returns the same shape as opentable_book plus was_modified: true so the agent can phrase the user confirmation accurately. For Listing-type restaurants there's no slot to lock — agents should check opentable_get_restaurant.bookable first. Without confirm:true this returns a dry-run and makes NO change to the reservation; re-run with confirm:true to submit the modification.

NameTypeReqDescription
confirmbooleanMust be true to proceed. Without this, the tool returns a preview.
confirmation_numberintegeryes
datestringyesYYYY-MM-DD (the NEW date)
dining_area_idintegerOptional. The modify_token carries the dining area preview resolved; when restated here it must match the token.
experience_idintegerOptional tamper-check signal. When set, must match the experienceId baked into modify_token.
modify_tokenstringREQUIRED. From opentable_modify_preview. No no-token path — the new slot's policy + CC re-hold can differ from the original.
party_sizeintegeryes
reservation_tokenstringyesslot_availability_token from opentable_find_slots for the NEW slot
restaurant_idintegeryes
security_tokenstringyes
slot_hashstringyesslot_hash from opentable_find_slots for the NEW slot
timestringyesHH:MM (24h) — the NEW time

No output schema declared.

No examples provided.

opentable_modify_preview ~500

Preview a MODIFICATION to an existing OpenTable reservation. Takes the existing reservation's identity (restaurant_id + confirmation_number + security_token from opentable_list_reservations or the original opentable_book result) plus the NEW slot args (from a fresh opentable_find_slots call) and returns the new cancellation_policy, CC re-hold details, and a `modify_token` that opentable_modify consumes. Mirrors opentable_book_preview, but the /booking/details URL includes confirmationNumber + securityToken + isModify=true so OpenTable's SSR returns the modify state. dining_area_id is OPTIONAL — omitted, it's auto-resolved from the booking-details page like book_preview does. REQUIRED before opentable_modify — no shortcut path. For Listing-type restaurants the modify can't proceed (no slot picker); check opentable_get_restaurant.bookable first.

NameTypeReqDescription
confirmation_numberintegeryes
database_regionstringOpenTable's sharded-database region for the restaurant. Defaults to 'NA' (North America). Pass the venue's region (e.g. for UK/EU/APAC restaurants) when booking or cancelling outside North America —…
datestringyesYYYY-MM-DD (the NEW date)
dining_area_idintegerOptional dining-area (room) id for the NEW slot. When omitted, auto-resolved to the default dining area from OpenTable's booking-details page — the same resolution opentable_book_preview uses. Pass e…
experience_idintegerFor Experience-mandatory slots; required when the new slot has experience_ids.
experience_idsarrayPass-through from find_slots.experience_ids. When non-empty, experience_id must also be set.
party_sizeintegeryes
reservation_tokenstringyesslot_availability_token from opentable_find_slots for the NEW slot
restaurant_idintegeryes
security_tokenstringyes
slot_hashstringyesslot_hash from opentable_find_slots for the NEW slot
timestringyesHH:MM (24h) — the NEW time

No output schema declared.

No examples provided.

opentable_remove_favorite ~29

Remove a restaurant from the user's Saved Restaurants list.

NameTypeReqDescription
restaurant_idintegeryes

No output schema declared.

No examples provided.

opentable_search_restaurants ~276

Search OpenTable for restaurants. Returns matching restaurants with cuisine, neighborhood, price band, rating, description, and URL. Does NOT include bookable slot tokens — use opentable_find_slots for a specific venue to check availability.

NameTypeReqDescription
datestringYYYY-MM-DD. Affects search ranking but not returned slots.
latitudenumber
locationstringCity / neighborhood / address — appended to the term. Prefer lat/lng when precise.
longitudenumber
metro_idintegerOpenTable metro id (e.g. 8 = SF Bay Area, 31 = Charlotte).
party_sizeintegerNumber of guests. Default 2.
termstringFree-text query (cuisine or restaurant name)
timestringHH:MM (24h). Default 19:00 when date is set.
viewstringResponse shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"…

No output schema declared.

No examples provided.

Common questions

What is the io.github.chrischall/opentable-mcp server?

io.github.chrischall/opentable-mcp is listed in the public MCP registry as io.github.chrischall/opentable-mcp. OpenTable reservation management: find slots, book, cancel, list reservations, manage favorites. This page covers its npm package (opentable-mcp).

Is the io.github.chrischall/opentable-mcp server safe to use?

io.github.chrischall/opentable-mcp scores 90 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 21 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.chrischall/opentable-mcp server expose?

io.github.chrischall/opentable-mcp exposes 14 tools: opentable_list_reservations, opentable_find_slots, opentable_book_preview, opentable_modify_preview, opentable_book, and 9 more. Their descriptions and schemas cost roughly 3,832 tokens of context every time the server is loaded.

Is the io.github.chrischall/opentable-mcp server still maintained?

io.github.chrischall/opentable-mcp is still listed as active in the MCP registry. We last reached this channel on 21 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.chrischall/opentable-mcp server under?

io.github.chrischall/opentable-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.