GrazieChef Kitchen Tools
NPM · @DEUSFLIGHT/GRAZIECHEF-MCP
Restaurant math for AI assistants: food cost, menu price with VAT, recipe scaling, EU 14 allergens.
Available components
Last scanned (12 hours ago)
Scores higher than 36% of npm servers
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency19
- Repository check failed: no source repository is declared. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 10 days ago).Pass
- Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability69
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 495 tokens (~123/item across 4 items; 4 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage89
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 67% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 24 Oct 26 −5
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 23 Oct 26 +4
- Stability: unverified → 0.27 ▲ functional
- 15 Oct 26 +30
- Injection markers: unverified → pass ▲ security
- First check of Judged manipulation: pass security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Tool coverage: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- First check of Tool coverage: 67 functional
- First check of Schema quality: fail functional
- First check of Destructive annotations: pass functional
- First check of Schema quality: pass functional
- First check of Schema quality: good functional
- 14 Oct 26 33
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Oct 2026 · Analysed npm/@deusflight/graziechef-mcp@1.0.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 93 packages
| Packages resolved | 93 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
allergen_matrix EU 14 allergens matrix for a menu ~129
Build the dish x allergen table required in the EU (Regulation 1169/2011, Annex II: gluten, crustaceans, eggs, fish, peanuts, soybeans, milk, tree nuts, celery, mustard, sesame, sulphites, lupin, molluscs). Give each dish with the allergens it contains (English, Italian or common names like 'shrimp', 'dairy'); returns a Markdown matrix plus the dishes to avoid per allergen. It does not guess allergens from dish names.
| Name | Type | Req | Description |
|---|---|---|---|
| dishes | array | yes | – |
| venue | string | – | – |
No output schema declared.
No examples provided.
food_cost_calculator Restaurant food cost calculator ~118
Cost a dish from its ingredients (unit cost x quantity), then get the selling price that hits a target food cost % and the actual food cost % at your current price. Same formula as graziechef.com/tools/food-cost-calculator.
| Name | Type | Req | Description |
|---|---|---|---|
| currency | string | – | ISO 4217 code used only for formatting, e.g. EUR, USD, GBP |
| ingredients | array | yes | – |
| sellingPrice | – | – | current menu price (optional) |
| targetFoodCostPercent | – | – | target food cost %, typically 25-35 |
No output schema declared.
No examples provided.
menu_price_calculator Menu price calculator (with VAT and rounding) ~150
From plate cost and target food cost %, compute the net price, the price including VAT/sales tax, and the menu price rounded UP to a clean step (e.g. 0.50), plus real gross profit and food cost % after rounding.
| Name | Type | Req | Description |
|---|---|---|---|
| currency | string | – | ISO 4217 code used only for formatting, e.g. EUR, USD, GBP |
| plateCost | number|string | yes | total ingredient cost of one plate |
| roundTo | – | – | round the menu price up to this step, 0 for none |
| targetFoodCostPercent | – | – | – |
| taxPercent | – | – | VAT / sales tax % included in menu prices (0 if prices are shown net) |
No output schema declared.
No examples provided.
recipe_scaler Recipe scaler with batch cost ~98
Scale a recipe from its original yield to a target number of portions. Returns every scaled quantity and, if unit costs are given, the batch cost and cost per portion.
| Name | Type | Req | Description |
|---|---|---|---|
| currency | string | – | ISO 4217 code used only for formatting, e.g. EUR, USD, GBP |
| ingredients | array | yes | – |
| originalYield | number|string | yes | portions the recipe makes now |
| targetYield | – | yes | portions you need |
No output schema declared.
No examples provided.
How do I install the GrazieChef Kitchen Tools MCP server?
GrazieChef Kitchen Tools runs locally as an npm package, launched with npx -y @deusflight/graziechef-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @deusflight/graziechef-mcp
claude mcp add com-graziechef-kitchen-tools -- npx -y @deusflight/graziechef-mcp
What is the GrazieChef Kitchen Tools MCP server?
GrazieChef Kitchen Tools is an MCP server listed in the public MCP registry as com.graziechef/kitchen-tools. Restaurant math for AI assistants: food cost, menu price with VAT, recipe scaling, EU 14 allergens. This page covers its npm package (@deusflight/graziechef-mcp).
Is the GrazieChef Kitchen Tools MCP server safe to use?
GrazieChef Kitchen Tools scores 62 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 25 October 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the GrazieChef Kitchen Tools MCP server expose?
GrazieChef Kitchen Tools exposes 4 tools: food_cost_calculator, menu_price_calculator, recipe_scaler, allergen_matrix. Their descriptions and schemas cost roughly 495 tokens of context every time the server is loaded.
Is the GrazieChef Kitchen Tools MCP server still maintained?
GrazieChef Kitchen Tools is still listed as active in the MCP registry. We last reached this channel on 25 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the GrazieChef Kitchen Tools MCP server under?
GrazieChef Kitchen Tools declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.