# Thmenu (remote · mcp.thmenu.com)

Restaurant menus, carts, reservations and owner drafts for AI agents (Thmenu MCP).

- Trust score: 75/100 (medium)
- Change this week: +1
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `mcp.thmenu.com`: 75/100 (this document), [markdown](https://verifymcp.io/servers/com-thmenu-thmenu/mcp.md), [page](https://verifymcp.io/servers/com-thmenu-thmenu/mcp)

## Channel facts

- Endpoint: `https://mcp.thmenu.com/`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.5.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 60/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (cancel_order).
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC is configured correctly; the domain's records validate against the full chain to the root.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 70/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 4140 tokens (~153/item across 27 items; 27 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 100/100
  - No destabilizing schema changes in the last 30 days.
- **Tool Coverage**: 83/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 49% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 27 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 27 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 40/100
  - Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28.

## Install

### How do I install the Thmenu MCP server?

Thmenu is a hosted endpoint at https://mcp.thmenu.com/, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-thmenu-thmenu 'https://mcp.thmenu.com/'
```

### Cursor

```json
{
  "mcpServers": {
    "com-thmenu-thmenu": {
      "url": "https://mcp.thmenu.com/"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-thmenu-thmenu": {
      "type": "http",
      "url": "https://mcp.thmenu.com/"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-thmenu-thmenu]
url = "https://mcp.thmenu.com/"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-thmenu-thmenu": {
      "type": "remote",
      "url": "https://mcp.thmenu.com/",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-thmenu-thmenu --url 'https://mcp.thmenu.com/' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-thmenu-thmenu:
    url: "https://mcp.thmenu.com/"
```

### Netclaw

```json
{
  "McpServers": {
    "com-thmenu-thmenu": {
      "Transport": "http",
      "Url": "https://mcp.thmenu.com/"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-thmenu-thmenu -t streamable-http -u 'https://mcp.thmenu.com/'
```

### Other

```json
{
  "mcpServers": {
    "com-thmenu-thmenu": {
      "type": "http",
      "url": "https://mcp.thmenu.com/"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-31 (score 75, +1)

- [security] Stability: 0.97 → pass

### 2026-10-30 (score 74, 0)

- [security] Tool “create_cart” rewrote its description, which is the text the model reads
- [security] Tool “get_restaurant_menu” rewrote its description, which is the text the model reads
- [security] Tool “place_order” rewrote its description, which is the text the model reads
- [security] Tool “search_restaurants” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 136 → 153
- [cosmetic] “search_restaurants” added an optional parameter “payment_available”

### 2026-10-28 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-26 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-24 (score 72, +1)

No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-22 (score 71, 0)

- [security] Tool “place_order” rewrote its description, which is the text the model reads

### 2026-10-21 (score 71, +1)

No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-19 (score 70, +1)

No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (27)

### `get_pricing` (~81 tokens)

Pricing model

Return Thmenu's commercial model as structured facts: free forever, every feature included, no subscription and no trial; the only charge is a platform fee in basis points on payment volume processed through Thmenu (the payment processor's own fee is separate); cash or external payments carry no Thmenu fee. Generated from the code that charges it — safe to cache.

### `get_faq` (~58 tokens)

Frequently asked questions

Return the FAQ entries from the public /faq page in the requested locale (31 locales; unknown locale falls back to en and the response says which locale was served). Useful for grounding answers to common product questions.

Input parameters:

- `locale` (string)

### `get_restaurant` (~282 tokens)

Restaurant profile

Fetch a public restaurant profile by slug: name, description, address/city/country, currency, timezone, phone, menu URL, opening hours (7 days, minutes from midnight; a close_minute above 1440 ends after midnight on the next day, e.g. 1560 = 02:00) with isOpenNow evaluated in the venue's own timezone (null when hours are unknown), owner-declared attributes (cuisine, dietary, …; null = not declared, never "no"), derived channels (order · reservation · pickup · delivery), policies derived from the venue's settings (ordering accepted / holiday mode / staff approval / payment timing / scheduled orders, takeaway & delivery ETA and fees, reservation party cap, table calls, tip cap), per-field owner verification timestamps, categories and product count, and `graph` — the canonical Restaurant Graph node's agent fields: verification state (UNCLAIMED · CLAIMED · SUSPENDED · HIDDEN; VERIFIED only when a human verified it), channel_states (each channel true/false/null with a reason — null means unknown, never "no"; TABLE_AVAILABLE only from tables staff confirmed ready), menu languages with coverage, and payment availability. Only restaurants opted into the public directory are visible.

Input parameters:

- `slug` (string, required): Restaurant slug, e.g. lily-rose-bistro

### `search_products` (~86 tokens)

Search products

Search products inside a single restaurant by keyword. Returns up to 20 matching products with name, description, price, allergen tags, and the deep-link URL. Restaurant must be in the public directory.

Input parameters:

- `limit` (integer)
- `locale` (string)
- `query` (string, required): Free-text search across name + description.
- `slug` (string, required): Restaurant slug.

### `list_public_menus` (~69 tokens)

Public restaurant directory

List restaurants that have opted into the public directory (directory_opt_in = 1 — the same flag the owner sets under "AI visibility"). Returns slug, name, city, country, and the menu URL. Paginated.

Input parameters:

- `limit` (integer)
- `page` (integer)

### `search_restaurants` (~669 tokens)

Search restaurants

Search the public directory (opt-in venues only) by location, opening status, cuisine, dietary options, declared attributes, ordering channel, declared price level and menu language — whether a guest can pay online through Thmenu and, right now, a free table or an open waitlist (the restaurant graph's channel states). Neutral ranking (AI-K6): distance in 0.5 km bands when `near` is given → availability (open now first; unknown hours before closed; a venue in holiday mode counts as closed) → profile freshness (owner-verified within 90 days first) → name. Payment to Thmenu never affects order. Cuisine, dietary, price level and other attributes are owner declarations, not verified facts; venues without a declaration are excluded only when an attribute or price filter is used, and venues without coordinates only when `near` is used. Returns slug, name, city, country, distance_km, is_open_now (serve-time, in the venue's own timezone; null when hours are unknown; false while the venue is in holiday mode), channels (order · reservation · pickup · delivery), declared attributes, freshness and the menu URL. Paginated.

Input parameters:

- `attributes` (array): Any declared attribute token (meals, family, outdoor, accessibility, cuisine, dietary).
- `channel` (string): order = digital ordering at the table; reservation; pickup = takeaway; delivery = venue's own delivery.
- `city` (string)
- `country` (string): ISO 3166-1 alpha-2
- `cuisine` (array): All listed cuisines must be declared by the venue.
- `dietary` (array): Owner declaration, not a certification.
- `limit` (integer)
- `menu_language` (string): The menu can be read in this language: it is the menu's source language, or at least 90 % of the guest menu's dish names are translated into it (the restaurant graph's rule).
- `near` (object): Search centre. Venues without coordinates are excluded when set.
- `open_now` (boolean): Only venues open right now in their own timezone; venues with unknown hours are excluded when true.
- `page` (integer)
- `payment_available` (boolean): Only venues where a guest can pay online through Thmenu (PAYMENT_AVAILABLE): the venue's online-payment switch is on, online payment through Thmenu works in its country, and the payment provider has…
- `price_max` (integer): Owner-declared price level 1–4 (schema.org priceRange "$" … "$$$$"): venues at or below it. Venues that declared no level are excluded when set.
- `q` (string): Free text over name and description (min 2 chars).
- `radius_km` (number)
- `table_available` (boolean): Only venues open now with a table that staff marked ready on the live table board (TABLE_AVAILABLE). Venues not using the board are excluded: unknown is not "available".
- `waitlist` (boolean): Only venues whose waitlist is open now (WAITLIST_AVAILABLE): the reservations switch, which also opens the waitlist, and the venue open now — not in holiday mode.

### `start_order_session` (~96 tokens)

Start an order session

Open a 30-minute transactional window for an AI agent against a specific restaurant. Returns an agent_session_id you MUST pass to every downstream order tool (place_order, cancel_order, request_bill, waiter_call, apply_promo). Also returns the customer-facing confirmation URL — share it with the human so they can review the cart before checkout.

Input parameters:

- `restaurant_id` (string, required): Canonical restaurant id from get_restaurant or search_products.

### `place_order` (~530 tokens)

Place an order

Place an order against the agent_session_id from start_order_session. Atomically inserts the order + items, applies server-side canonical pricing + tax (do NOT trust the unit_price you compute — we re-read it from D1), decrements inventory and optionally redeems a promo code. The guest pays at the venue (payment_status 'unpaid'). At a venue that takes payment before preparing (pay_first: true) the order is held as 'awaiting' and payment_url is returned: give it to the guest — they pay on the restaurant's own checkout, exactly like a guest ordering from the table; the kitchen gets the order once it is paid, and an unpaid order expires. This tool never charges anything itself. Options (size, doneness, extras …): get_restaurant_menu lists each dish's option_groups; send the chosen option ids per line as modifier_option_ids — each option's price_delta is added to the dish price on the server. A group with required: true needs at least max(1, min_select) of its options and no group takes more than max_select. A line that breaks this is refused and nothing is ordered: modifier_required (a required group left empty), modifier_too_many, modifier_unknown_option (an id the dish does not offer), modifier_malformed (not a list of option ids); the error data names the product_id and group_id. Ask the guest, or leave that dish out. Returns order_id, total_cents (tax-inclusive), currency, promo_discount and, when pay_first, payment_url. Idempotency-Key header REQUIRED.

Input parameters:

- `agent_session_id` (string, required)
- `customer_name` (string): Required for takeaway — who picks the order up.
- `customer_phone` (string): Required for takeaway — reachable phone (digits, +, spaces/dashes tolerated).
- `guest_name` (string): Optional guest name shown to staff with the order.
- `items` (array, required)
- `note` (string): Optional order-level note (max 500 chars).
- `order_type` (string): Channel: 'dine_in' (default — at a table) or 'takeaway' (pickup; requires customer_name + customer_phone, ignores table_id, only when the restaurant has takeaway enabled — else channel_not_available)…
- `promo_code` (string): Optional promo code to redeem at order time (validate first with apply_promo). The redemption slot is consumed only when this order lands.
- `table_id` (string): Optional table id when ordering at a table.

### `cancel_order` (~93 tokens)

Cancel an order

Cancel an order placed via the same agent_session_id. Atomic — only succeeds while the order is still in "pending" or "confirmed" (the early KDS-accept state). Once the kitchen starts preparing, you must escalate to waiter_call. Idempotent: replays return the original outcome. Idempotency-Key header REQUIRED.

Input parameters:

- `agent_session_id` (string, required)
- `order_id` (string, required)

### `get_order_status` (~71 tokens)

Order status

Poll the current status of an order. Returns status, prepared_items_count, total_items_count, eta_minutes (if available), and an optional customer-facing message. Safe to call every 30 seconds; do NOT poll faster.

Input parameters:

- `agent_session_id` (string, required)
- `order_id` (string, required)

### `request_bill` (~83 tokens)

Request the bill

Ask the venue to bring the bill for a table. INSERTs a bill_requests row + fires the admin push notification. The split_type defaults to "full"; pass "personal" for German-style per-device splits.

Input parameters:

- `agent_session_id` (string, required)
- `note` (string)
- `split_type` (string)
- `table_id` (string, required)

### `waiter_call` (~71 tokens)

Call a waiter

Flag a waiter to the table. INSERTs a waiter_calls row + fires the admin push notification. Pass an optional human-readable message (max 500 chars) the staff sees in the dashboard.

Input parameters:

- `agent_session_id` (string, required)
- `message` (string)
- `table_id` (string, required)

### `get_restaurant_menu` (~327 tokens)

Restaurant menu

Fetch the full public menu for a restaurant — categories, products, prices, option groups, allergens, nutrition. Use this to build the cart you pass to place_order. PUBLIC tool, no auth required. Each product carries `option_groups` (id, name, required, min_select, max_select, options[{id, name, price_delta}]); pass the chosen option ids as items[].modifier_option_ids to place_order or to create_cart (the anonymous cart the guest confirms) — a required group must be filled or the order or cart is refused. `allergen_codes` are EU 1169/2011 Annex II keys (gluten, crustaceans, eggs, fish, peanuts, soy, milk, nuts, celery, mustard, sesame, sulphites, lupin, molluscs) given ONLY when the venue's allergen name matches the regulation list exactly; a venue-specific allergen appears in `allergens` without a code. Allergen lists come from the venue (or were AI-suggested and then saved by the venue where `allergen_disclosure.source` says so). `allergen_disclosure.as_of` is when the venue last edited the item record, not a verification date. Follow the top-level `disclosure.agent_instructions`; show `disclosure.text` to the guest in their language whenever an allergen or dietary question comes up; `dietary_flags` only ever warn (true) — null is unknown, never "free of".

Input parameters:

- `locale` (string)
- `restaurant_id` (string, required)

### `check_loyalty` (~71 tokens)

Loyalty balance

Look up a loyalty member by member_id. Returns balance, tier, lifetime_points, and the most recent 10 transactions so the agent can ground its recommendation ("you have 320 points, enough for a free coffee").

Input parameters:

- `agent_session_id` (string, required)
- `member_id` (string, required)

### `apply_promo` (~82 tokens)

Preview a promo code

Validate a promo code (eligibility preview only — does NOT reserve a slot). Returns valid=true with discount info when the code is currently redeemable; pass the same code as place_order.promo_code to actually apply + redeem it (the slot is consumed only when the order lands).

Input parameters:

- `agent_session_id` (string, required)
- `code` (string, required)

### `join_loyalty` (~127 tokens)

Join the loyalty programme

Loyalty sign-up for a guest. The guest must confirm their own e-mail, so joining happens on the restaurant's menu (My thmenu → Loyalty); this tool answers with that instruction and never reveals whether an e-mail or phone is already enrolled. Requires an active agent_session_id.

Input parameters:

- `agent_session_id` (string, required): Active session id from start_order_session.
- `display_name` (string): Not used.
- `email` (string): Not used for a lookup; the guest confirms their e-mail on the menu.
- `phone` (string): Not used for a lookup.

### `create_cart` (~360 tokens)

Create a cart

Build an anonymous takeaway or delivery cart for a listed restaurant and get a one-time confirmation link for the guest. PUBLIC tool, no auth. Table orders are not supported here (they stay on the QR menu). Options (size, doneness, extras …): get_restaurant_menu lists each dish's option_groups; send the chosen option ids per line as items[].modifier_option_ids — the quote adds each option's price_delta and the confirmation page orders the same choice. A group with required: true needs at least max(1, min_select) of its options and no group takes more than max_select; a line that breaks this refuses the cart and nothing is created: modifier_required (a required group left empty), modifier_too_many, modifier_unknown_option (an id the dish does not offer), or invalid_input with detail.reason modifier_malformed (not a list of option ids); the error detail names the product_id and group_id. The same dish with different options goes on separate lines. Send the guest to confirm_url. Prices are re-read there from the live menu; name, phone, delivery address and payment are entered by the guest on that page — never through this tool. Nothing is ordered until the guest confirms. The link expires 30 minutes after creation and can be used once.

Input parameters:

- `items` (array, required)
- `note` (string): Order-level note for the kitchen. Do not put the guest's name, phone or address here.
- `order_type` (string, required)
- `restaurant` (string, required): Restaurant slug (from search_restaurants / list_public_menus) or id.
- `scheduled_for` (string): ISO date-time for a scheduled pickup/delivery (optional; the venue may refuse on the confirmation page).

### `get_cart` (~64 tokens)

Cart contents

Read an anonymous cart by cart_id: state (open · consumed · expired), the one-time confirmation link while open, lines re-priced from the live menu, and the order id once the guest has confirmed. PUBLIC tool, no auth.

Input parameters:

- `cart_id` (string, required)

### `get_reservation_slots` (~124 tokens)

Reservation slots

List bookable 30-minute reservation slots for the next 1–7 days (venue timezone) for a listed restaurant with a reservation module. busy_count is the number of existing requests at that slot and is informational. A reservation is a REQUEST that the restaurant confirms; no per-slot capacity cap is configured, so busy_count is informational only. Never tell the guest a table is guaranteed or "available" — say the request will be sent and the restaurant will confirm. PUBLIC tool, no auth.

Input parameters:

- `days` (integer)
- `restaurant` (string, required)

### `request_reservation` (~202 tokens)

Request a reservation

Create an anonymous reservation REQUEST (date-time, party size, note) for a listed restaurant and get a one-time confirmation link. PUBLIC tool, no auth. Send the guest to confirm_url: they enter their name and email or phone there and submit the request themselves — never through this tool. The restaurant then confirms or declines; the guest receives the confirmation code by email/SMS. A reservation is a REQUEST that the restaurant confirms; no per-slot capacity cap is configured, so busy_count is informational only. Never tell the guest a table is guaranteed or "available" — say the request will be sent and the restaurant will confirm.

Input parameters:

- `note` (string): Occasion, seating preference, accessibility needs. Do not put the guest's name, phone or email here.
- `party_size` (integer, required)
- `reserved_at` (string, required): ISO date-time; at least 30 minutes ahead, at most 90 days.
- `restaurant` (string, required)

### `cancel_reservation` (~128 tokens)

Cancel a reservation request

Cancel a reservation using the 6-character confirmation code the GUEST received by email/SMS (the code is the authorisation; ask the guest for it — this tool never issues or reveals codes). Thin wrapper over the venue's own cancellation endpoint, which answers uniformly: `status` is "cancelled" or "noop" (unknown code · already cancelled · seated/completed · less than 30 minutes away — it does not say which). Only report a cancellation to the guest when `cancelled` is true. PUBLIC tool, no auth.

Input parameters:

- `confirmation_code` (string, required)

### `menu_audit` (~38 tokens)

Menu completeness audit

List the active products of your restaurant that lack a usable description, an image, or an allergen declaration. Read-only; nothing is changed.

### `sales_summary` (~40 tokens)

Orders summary (7 and 30 days)

Order counts by status, order total sums, top products by quantity and busiest hours for the last 7 and 30 days of your restaurant. Read-only.

### `reservation_summary` (~42 tokens)

Upcoming reservations

Reservation requests of your restaurant for the next 14 days grouped by day and status, with pending requests that still need an answer. Read-only; no guest contact details.

### `draft_product_description` (~95 tokens)

Draft a product description

Propose a new description for one of your products. Nothing goes live: the text is saved as a DRAFT change set the owner reviews, previews and publishes (or discards) in the admin panel.

Input parameters:

- `description` (string, required): Proposed description in the menu language. Plain text, no links, no claims you cannot verify.
- `product_id` (string, required): Product id from menu_audit or get_restaurant_menu.

### `draft_site_text` (~95 tokens)

Draft the website text pack

Propose the public website text of your restaurant — tagline, about paragraph, SEO title and SEO description — as a DRAFT change set. Only declared facts are allowed: no numbers, awards, links or markup; validation rejects anything else. The owner publishes from the admin panel.

Input parameters:

- `about` (string, required)
- `seo_description` (string, required)
- `seo_title` (string, required)
- `tagline` (string, required)

### `draft_translation` (~156 tokens)

Draft a menu translation

Propose a translation (name and/or description) of one product or category into one menu language. Nothing goes live: it is saved as a DRAFT change set the owner reviews and publishes in the admin panel; manual translations override machine translation once published.

Input parameters:

- `description` (string): Translated description (optional). Plain text, no links, same meaning as the source — never add ingredients or claims.
- `entity` (string, required)
- `entity_id` (string, required): Product or category id from get_restaurant_menu / menu_audit.
- `locale` (string, required): Target menu language (two letters), different from the menu source language.
- `name` (string): Translated name (optional). Keep brand names as they are.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-thmenu-thmenu/mcp#diagnostics

## Score history

- 2026-11-05: 75
- 2026-11-04: 75
- 2026-11-03: 75
- 2026-11-02: 75
- 2026-11-01: 75
- 2026-10-31: 75
- 2026-10-30: 74
- 2026-10-29: 74
- 2026-10-28: 74
- 2026-10-27: 73
- 2026-10-26: 73
- 2026-10-25: 72
- 2026-10-24: 72
- 2026-10-23: 71
- 2026-10-22: 71
- 2026-10-21: 71
- 2026-10-20: 70
- 2026-10-19: 70
- 2026-10-18: 69
- 2026-10-17: 69
- 2026-10-16: 68
- 2026-10-15: 68
- 2026-10-14: 67
- 2026-10-13: 65
- 2026-10-12: 65
- 2026-10-10: 64
- 2026-10-07: 65
- 2026-10-04: 63
- 2026-10-03: 63
- 2026-10-02: 62

## Common questions

### What is the Thmenu MCP server?

Thmenu is an MCP server listed in the public MCP registry as com.thmenu/thmenu. Restaurant menus, carts, reservations and owner drafts for AI agents (Thmenu MCP). This page covers its hosted endpoint (https://mcp.thmenu.com/).

### Is the Thmenu MCP server safe to use?

Thmenu scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Thmenu MCP server expose?

Thmenu exposes 27 tools: get_pricing, get_faq, get_restaurant, search_products, list_public_menus, and 22 more. Their descriptions and schemas cost roughly 4,140 tokens of context every time the server is loaded.

### Does the Thmenu MCP server require authentication?

No. We connected to Thmenu without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the Thmenu MCP server still maintained?

Thmenu is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://mcp.thmenu.com/
- Website: https://thmenu.com/
- Changelog RSS feed: https://verifymcp.io/servers/com-thmenu-thmenu/mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-thmenu-thmenu/mcp.json
- HTML version of this page: https://verifymcp.io/servers/com-thmenu-thmenu/mcp