Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

ge.meni/guest

REMOTE · API.MENI.GE

Guest API for meni.ge restaurants: browse menus, place orders, reserve tables. No auth needed.

Available components

0 this week 75 Trust /100

Last scanned (21 hours ago)

Scores higher than 64% of remote servers

Reachable. Last reached 4 Nov 2026.

Category E-commerce

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security57
Transport & Reachability100
Schema Quality & AI Usability65
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 2991 tokens (~186/item across 16 items; 16 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage82
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 45% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 16 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 3 Nov 26 0
    • HSTS header: unverified → fail ▼ security
    • DNSSEC: unverified → fail ▼ security
    • Injection markers: unverified → pass ▲ security
    • Stability: unverified → pass ▲ security
    • TLS certificate: unverified → pass ▲ security
    • Transport: fail → pass ▲ security
    • Authorization: Authorisation not fully verified: no authorisation is required to call this server, and 16 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. security
    • Endpoint reachability: unreachable → reachable ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
    • MCP protocol: unverified → pass ▲ functional
  • 2 Nov 26 0
    • Endpoint reachability: reachable → unreachable ▼ security
    • DNSSEC: fail → unverified ▼ security
    • HSTS header: fail → unverified ▼ security
    • Stability: pass → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • TLS certificate: pass → unverified ▼ security
    • Transport: pass → fail ▼ security
    • Authorization: Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • First check of Schema quality: unverified functional
  • 12 Oct 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Schema quality: excellent → good functional
  • 1 Oct 26 75
    • Tool “quote_stay” rewrote its description, which is the text the model reads security
    • “get_hotel_availability” reworded the description of “party” cosmetic
    • “quote_stay” reworded the description of “party” cosmetic
  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 24 Sept 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Schema quality: 126 → 170 ▼ functional
    • Tool coverage: 31% → 45% ▲ functional
    • Schema quality: good → excellent functional
    • New tool “get_hotel_availability” functional
    • New tool “hotel_info” functional
    • New tool “quote_stay” functional
  • 26 Aug 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Nov 2026 · Probed https://api.meni.ge/llm/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=*.meni.ge CN=Amazon RSA 2048 M01,O=Amazon,C=US 5 Jan 2026 3 Feb 2027 RSA 2048 SHA256-RSA 89b3cb57dd7a0c0903e130e2658c150
SANs: *.meni.ge, meni.ge
CN=Amazon RSA 2048 M01,O=Amazon,C=US (CA) CN=Amazon Root CA 1,O=Amazon,C=US 23 Aug 2022 23 Aug 2030 RSA 2048 SHA256-RSA 77312380b9d6688a33b1ed9bf9ccda68e0e0f
CN=Amazon Root CA 1,O=Amazon,C=US (CA) CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US 25 May 2015 31 Dec 2037 RSA 2048 SHA256-RSA 67f944a2a27cdf3fac2ae2b01f908eeb9c4c6

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of api.meni.ge. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
ge. present 39472, 39472 8, 8 Verified
meni.ge. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://api.meni.ge/llm/mcp Verified 200
http (plaintext) http://api.meni.ge/llm/mcp HTTPS enforced
MCP tools · 16 exposed · ~2,568 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
cancel_reservation ~34

Cancel a reservation previously created with create_reservation.

NameTypeReqDescription
domainstringyes–
reservationIdstringyes–

No output schema declared.

No examples provided.

check_table_availability ~74

Which tables of the location are free or busy in a given time window (uses the floor plan published by the restaurant). Pass the chosen table id to create_reservation as tableId.

NameTypeReqDescription
domainstringyes–
durationMinutesinteger––
startstringyesISO 8601 datetime

No output schema declared.

No examples provided.

create_order ~221

Validate and place an order at a meni.ge location. Returns orderId (keep it — it is the access token for status checks) and the computed total. customer.name/phone are required for pickup and delivery; delivery.address is required for delivery. Pass either items (inline) or cartId (the cart built with update_cart) — not both. Always pass idempotencyKey when you might retry: the same key within 48h returns the original order instead of placing a second one.

NameTypeReqDescription
cartIdstring–Order this cart; mutually exclusive with items
customerobject––
deliveryobject––
domainstringyes–
idempotencyKeystring–Retry guard, e.g. a UUID you keep for this order attempt
itemsarray––
languagestring––
notesstring––
orderTypestring––
paymentMethodstring––
pickupobject––
qrCodestring––

No output schema declared.

No examples provided.

create_reservation ~162

Request a table reservation. Starts as "pending" until the restaurant confirms — check with get_reservation_status. Returns reservationId (keep it: it is the token for status and cancellation). Optionally bind a specific table via tableId (from check_table_availability).

NameTypeReqDescription
codeIdstring––
commentstring––
domainstringyes–
durationMinutesinteger––
idempotencyKeystring–Retry guard: repeating the same key returns the original reservation instead of booking twice.
namestringyesGuest name
partySizeinteger––
phonestring––
startstringyesISO 8601 datetime
tableIdstring––

No output schema declared.

No examples provided.

get_cart ~84

Read a cart created with update_cart: lines with live unit prices, subtotal, item count, the checkoutUrl for a human hand-off and the expiry date (carts live 7 days). Lines whose item left the menu are flagged unavailable and excluded from the subtotal.

NameTypeReqDescription
cartIdstringyes–
domainstringyes–
languagestring––

No output schema declared.

No examples provided.

get_hotel_availability ~338

Hotels only. Есть ли свободные номера на ВСЕ ночи [checkIn, checkOut): по типам номеров — сколько свободно и помещается ли компания. Данные — из опубликованного календаря отеля. Дат нет — не вызывай, а спроси их. ok:false с reason unknown/stale/unavailable — данных нет: не утверждай ни «свободно», ни «занято», веди к форме бронирования или к человеку. ok:false с reason bad_request — ошибка в датах вызова, а не «данных нет»: dates-required — спроси у гостя даты заезда и выезда; checkin-in-the-past, checkout-not-after-checkin, checkin-too-far-ahead — уточни даты.

NameTypeReqDescription
checkInstringyesЗаезд. Дата YYYY-MM-DD по календарю отеля.
checkOutstringyesВыезд (позже заезда). Дата YYYY-MM-DD по календарю отеля.
domainstringyesHotel location code (uppercase, from the site URL or QR).
partyobject–Кто едет: взрослые (≥1), дети и возраст каждого ребёнка (childAges). Передавай, только если гость назвал; не назвал — не передавай и НЕ спрашивай ради цены или наличия: посчитается цена номера (price…

No output schema declared.

No examples provided.

get_item ~106

Get one menu item with its variant groups and addons, or several at once: pass itemIds (up to 10) instead of itemId to look items up in bulk — the bulk answer is {items, notFound}.

NameTypeReqDescription
domainstringyes–
itemIdstring–One item; mutually exclusive with itemIds
itemIdsarray–Bulk lookup, up to 10 ids; mutually exclusive with itemId
languagestring––

No output schema declared.

No examples provided.

get_menu ~79

Get the full menu of a meni.ge location: categories, items with prices, variant groups and addons, currency and ordering capabilities. domain = uppercase location code from the QR/menu URL.

NameTypeReqDescription
domainstringyesLocation domain code, e.g. MYCAFE
languagestring–ISO 639-1 menu language, default en

No output schema declared.

No examples provided.

get_order_status ~36

Check the status of an order previously created with create_order.

NameTypeReqDescription
domainstringyes–
orderIdstringyes–

No output schema declared.

No examples provided.

get_reservation_status ~41

Status of a reservation created with create_reservation (pending/confirmed/seated).

NameTypeReqDescription
domainstringyes–
reservationIdstringyes–

No output schema declared.

No examples provided.

get_store_info ~116

Facts about the location that are not on the menu: address, contacts, coordinates, working hours with openNow computed in the venue timezone, delivery and pickup terms (fees, minimum order, zones, ETA), accepted payment methods and currency, shipping/return terms and links to the published legal documents. Use this before answering "are you open?", "do you deliver?", "how much is delivery?".

NameTypeReqDescription
domainstringyes–
languagestring–ISO 639-1; falls back to the location default

No output schema declared.

No examples provided.

hotel_info ~200

Hotels only. Факты об отеле из его базы знаний для гостей: заезд/выезд, завтрак, парковка, правила, услуги, как добраться. Вызывай для любого вопроса об отеле, кроме свободных номеров и цены проживания, — и для ПРОСЬБЫ об услуге («организуйте трансфер», «закажите такси», «нужна кроватка»): узнай, как она заказывается, и ответь фактами. Возвращает выдержки; ok:false — в базе ответа нет, тогда честно скажи, что не знаешь, и предложи человека.

NameTypeReqDescription
domainstringyesHotel location code (uppercase, from the site URL or QR).
langstring–Язык гостя (en, ru, ka, tr…), необязательно.
querystringyesВопрос гостя своими словами (на любом языке).

No output schema declared.

No examples provided.

quote_stay ~623

Hotels only. ПРЕДВАРИТЕЛЬНАЯ цена проживания на конкретные даты (не бронь и не резерв). roomTypeId — из get_hotel_availability, если гость выбрал тип номера; тип не назван — НЕ спрашивай его, а вызывай без roomTypeId: посчитается каждый тип (roomTypes[] — у каждого quote или reason отказа). Называй гостю ровно total и currency из ответа вместе с датами; окончательная цена — в форме бронирования. ok:false — цены нет, не угадывай; detail — причина (min-stay — минимальный срок проживания и т.п.), её и назови. Цена относится к тарифу ratePlan из ответа: называй его по ratePlan.name (на языке гостя) и с его условиями отмены, а не тарифом, о котором спросил гость. Тариф не назван — подбирается самый дешёвый продаваемый; notOffered — тарифы, которые на эти даты не продаются, и причина (min-stay и т.п.). Без party цена — за номер (priceBasis room); гость назвал компанию — передай party, цена будет на неё (priceBasis party): так и скажи гостю. detail child-ages-required — цена зависит от возраста детей: спроси возраст каждого ребёнка и посчитай снова. ok:false с reason bad_request — ошибка в датах вызова, а не «данных нет»: dates-required — спроси у гостя даты заезда и выезда; checkin-in-the-past, checkout-not-after-checkin, checkin-too-far-ahead — уточни даты.

NameTypeReqDescription
checkInstringyesЗаезд. Дата YYYY-MM-DD по календарю отеля.
checkOutstringyesВыезд (позже заезда). Дата YYYY-MM-DD по календарю отеля.
domainstringyesHotel location code (uppercase, from the site URL or QR).
partyobject–Кто едет: взрослые (≥1), дети и возраст каждого ребёнка (childAges). Передавай, только если гость назвал; не назвал — не передавай и НЕ спрашивай ради цены или наличия: посчитается цена номера (price…
ratePlanIdstring–id тарифа (ratePlan.ratePlanId или id из notOffered прежнего ответа), если гость выбрал конкретный тариф; иначе не передавай. Тариф с ограничением на эти даты вернёт ok:false с причиной.
roomTypeIdstring–roomTypeId из ответа get_hotel_availability; гость тип не назвал — не передавай (посчитаются все типы).

No output schema declared.

No examples provided.

search_policies_and_faqs ~131

Search the location's own published policies, FAQ entries and info pages (privacy, terms, returns, delivery, cookies, help articles) plus, when the owner allows it, their internal knowledge base. Returns short snippets with a link to the source. Use it for policy/help questions instead of guessing; use get_store_info when you need structured numbers.

NameTypeReqDescription
domainstringyes–
languagestring––
limitinteger–How many snippets to return (1–10, default 5)
querystringyesThe guest question, in any language

No output schema declared.

No examples provided.

search_products ~145

Semantic search over the location's catalog: product/dish names, descriptions, specifications, brand, SKU/barcodes and attached docs. Use for "do you have…" / "recommend…" / "how much is…" questions instead of paging through get_menu. Returns matching items with prices and a relevance score; falls back with a note when the search index is unavailable for the location.

NameTypeReqDescription
domainstringyes–
languagestring–ISO 639-1 menu language, default en
limitinteger–How many items to return (1–10, default 6)
querystringyesWhat the guest is looking for, in any language

No output schema declared.

No examples provided.

update_cart ~178

Build the guest order step by step in a server-side cart, the way a human uses the web cart. Without cartId a new cart is created (keep the returned cartId — it is the access token). Each entry of updates: {itemId, quantity, variants?, addons?, comment?} adds a line; {lineId, quantity} changes one; {lineId, quantity: 0} removes it. Prices are recomputed from the live menu on every read, never stored. The answer includes a checkoutUrl the human can open to finish in the normal web checkout, and the cart can be placed as an order with create_order(cartId).

NameTypeReqDescription
cartIdstring–Omit to create a new cart
domainstringyes–
languagestring––
updatesarrayyes–

No output schema declared.

No examples provided.

Install

How do I install the ge.meni/guest MCP server?

ge.meni/guest is a hosted endpoint at https://api.meni.ge/llm/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · api.meni.ge

# add to Claude Code
claude mcp add --transport http ge-meni-guest 'https://api.meni.ge/llm/mcp'
Common questions

What is the ge.meni/guest MCP server?

ge.meni/guest is an MCP server listed in the public MCP registry as ge.meni/guest. Guest API for meni.ge restaurants: browse menus, place orders, reserve tables. No auth needed. This page covers its hosted endpoint (https://api.meni.ge/llm/mcp).

Is the ge.meni/guest MCP server safe to use?

ge.meni/guest scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the ge.meni/guest MCP server expose?

ge.meni/guest exposes 16 tools: get_menu, get_item, search_products, update_cart, get_cart, and 11 more. Their descriptions and schemas cost roughly 2,568 tokens of context every time the server is loaded.

Does the ge.meni/guest MCP server require authentication?

No. We connected to ge.meni/guest without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the ge.meni/guest MCP server still maintained?

ge.meni/guest is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.