io.github.mgwalkerjr95/texas-grocery
PYPI · TEXAS-GROCERY-MCP
MCP server for HEB grocery store integration - search products, manage carts, clip coupons, and more
Available components
Last scanned (1 day ago)
Scores higher than 67% of PyPI servers
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security50
- Malware scan not yet available for this package.Unverified
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs hatchling.build at install time, a recognised build step with no custom scripting around it. View diagnostics → Pass
- 4 of 42 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency47
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 273 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability82
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2761 tokens (~110/item across 25 items; 25 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety88
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 1 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "session_clear_credentials" implies "remove" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Partial
- An AI judge read all 26 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 −15
- Malware scan: pass → unverified ▼ security
- 1 Nov 26 +15
- Malware scan: unverified → pass ▲ security
- 31 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- Stability: 0.97 → pass security
- 30 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- Stability: pass → 0.97 functional
- 29 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- 28 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 27 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- 26 Oct 26 +15
- Malware scan: unverified → pass ▲ security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Analysed pypi/texas-grocery-mcp@0.1.3
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | hatchling.build |
Background: Why install scripts are a supply-chain risk →
Dependencies 42 packages
| Packages resolved | 42 |
|---|---|
| Stale | 4 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
cart_add Cart Add ~163
Add an item to the shopping cart with verification. Without confirm=true, returns a preview of the action. With confirm=true, executes the action and VERIFIES it worked. IMPORTANT: Use both product_id and sku_id from product_search results: - product_id: shorter ID (e.g., '127074') - sku_id: longer ID (e.g., '4122071073') Returns error if item wasn't actually added to cart.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Set to true to confirm the action |
| product_id | string | yes | HEB product ID (short numeric ID from search results) |
| quantity | integer | – | Quantity to add |
| sku_id | – | – | SKU ID (longer numeric ID). If not provided, uses product_id for both. |
Structured output declared, but exposes no named fields.
No examples provided.
cart_add_many Cart Add Many ~157
Add multiple items to cart with a single confirmation. This is more efficient than calling cart_add multiple times and provides a single confirmation gate for the entire batch. IMPORTANT: This operation uses STRICT success semantics. If ANY item fails to add, the entire operation is reported as a FAILURE. Items that were successfully added will remain in the cart, but you'll receive a clear list of which items failed.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Set to True to execute the bulk add. Default False shows preview of items to be added. |
| items | array | yes | List of items to add. Each item must have: product_id (short ID), sku_id (full SKU), quantity (>=1). Maximum 100 items per call. |
Structured output declared, but exposes no named fields.
No examples provided.
cart_add_with_retry Cart Add With Retry ~131
Add item to cart with automatic ID correction. If the initial add fails due to ID format issues and auto_correct_ids=True, this will search for the product and retry with the correct IDs. This is a more resilient version of cart_add that can recover from incorrect ID formats by looking up the product.
| Name | Type | Req | Description |
|---|---|---|---|
| auto_correct_ids | boolean | – | Attempt to auto-correct IDs if add fails |
| confirm | boolean | – | Set to true to confirm |
| product_id | string | yes | HEB product ID |
| quantity | integer | – | Quantity to add |
| sku_id | – | – | SKU ID |
Structured output declared, but exposes no named fields.
No examples provided.
cart_check_auth Cart Check Auth ~32
Check if authenticated for cart operations. Returns authentication status and instructions if not authenticated. Use this before attempting cart operations.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
cart_get Cart Get ~24
Get current cart contents. Returns all items in the cart with quantities and prices.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
cart_remove Cart Remove ~83
Remove an item from the shopping cart. Without confirm=true, returns a preview of the action. With confirm=true, executes the action.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Set to true to confirm the action |
| product_id | string | yes | Product SKU/ID to remove |
| sku_id | – | – | SKU ID if known (will be looked up from cart if not provided) |
Structured output declared, but exposes no named fields.
No examples provided.
coupon_categories Coupon Categories ~39
Get available coupon categories/departments. Returns a list of categories with the number of coupons in each. Use category names with coupon_list to filter coupons.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
coupon_clip Coupon Clip ~85
Clip a coupon to your HEB account. Without confirm=true, returns a preview of the action. With confirm=true, clips the coupon (requires authentication). Clipped coupons automatically apply at checkout when you buy eligible items.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Set to true to confirm the action |
| coupon_id | integer | yes | Coupon ID to clip (from coupon_list or coupon_search) |
Structured output declared, but exposes no named fields.
No examples provided.
coupon_clipped Coupon Clipped ~49
List your clipped coupons. Returns all coupons you've clipped to your HEB account. Clipped coupons automatically apply at checkout when you buy eligible items.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum coupons to return |
Structured output declared, but exposes no named fields.
No examples provided.
coupon_list Coupon List ~72
List available HEB digital coupons. Returns coupons with discount details, descriptions, and expiration dates. Filter by category to find coupons in specific departments.
| Name | Type | Req | Description |
|---|---|---|---|
| category | – | – | Filter by category name (e.g., 'pantry', 'health & beauty') or ID |
| limit | integer | – | Maximum coupons to return |
Structured output declared, but exposes no named fields.
No examples provided.
coupon_search Coupon Search ~64
Search for HEB coupons by keyword. Search for coupons by product name, brand, or discount type.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum coupons to return |
| query | string | yes | Search term (e.g., 'chips', 'dove', '25% off') |
Structured output declared, but exposes no named fields.
No examples provided.
health_live Health Live ~30
Liveness probe - is the process running? Returns a simple alive status. Use for Kubernetes liveness probes.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
health_ready Health Ready ~29
Readiness probe - can the server handle requests? Returns detailed component health. Use for Kubernetes readiness probes.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
product_get Product Get ~139
Get comprehensive details for a single product. Returns detailed product information including: - Full description - Complete ingredients text - Safety/allergen warnings - Nutritional information (full FDA panel for packaged food) - Storage and preparation instructions - Dietary attributes (Gluten-Free, Organic, Vegan, etc.) - Store location (aisle or section) Use this when you need more information than product_search provides, such as checking ingredients for dietary restrictions or allergens.
| Name | Type | Req | Description |
|---|---|---|---|
| product_id | string | yes | Product ID from product_search results (e.g., '127074') |
| store_id | – | – | Store ID for pricing/availability. Uses default if not provided. |
Structured output declared, but exposes no named fields.
No examples provided.
product_search Product Search ~110
Search for products at an HEB store. Returns products matching the query with pricing and availability for the specified store.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | – | – | Field set to return: minimal (sku, name, price), standard (+brand, size, image), all (+nutrition) |
| limit | integer | – | Maximum results to return |
| query | string | yes | Search query (e.g., 'milk', 'chicken breast') |
| store_id | – | – | Store ID for pricing/availability. Uses default if not provided. |
Structured output declared, but exposes no named fields.
No examples provided.
product_search_batch Product Search Batch ~102
Search for multiple products at once. More efficient than calling product_search multiple times. Handles throttling internally to prevent rate limiting. Returns results for each query, with availability at the specified store.
| Name | Type | Req | Description |
|---|---|---|---|
| limit_per_query | integer | – | Maximum results per query |
| queries | array | yes | List of search queries (e.g., ['milk', 'eggs', 'bread']) |
| store_id | – | – | Store ID for pricing/availability. Uses default if not provided. |
Structured output declared, but exposes no named fields.
No examples provided.
session_clear Session Clear ~56
Clear saved session cookies. Use this to log out or clear invalid session data. After clearing, you will need to run session_refresh again. Note: This does NOT clear saved credentials. Use session_clear_credentials() to remove stored login credentials.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
session_clear_credentials Session Clear Credentials ~34
Remove stored HEB login credentials. After clearing, session_refresh will fall back to manual browser login when your session expires.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
session_refresh Session Refresh ~186
Refresh HEB session cookies and tokens. Uses embedded browser when available (fast: ~10-15 seconds). If credentials are saved and login is required, attempts automatic login. Falls back to returning Playwright MCP commands if browser dependencies aren't installed.
| Name | Type | Req | Description |
|---|---|---|---|
| headless | boolean | – | Run browser without visible window (default True). Set to False if you need to complete a manual login (e.g., when your session has fully expired). |
| login_timeout | integer | – | Maximum time to wait for manual login in milliseconds. Default 300000 (5 minutes). Only used when headless=False. |
| timeout | integer | – | Maximum time to wait for page load in milliseconds. Default 30000 (30 seconds). |
| use_saved_credentials | boolean | – | If True and credentials are stored, attempt automatic login when session is expired. Default True. |
Structured output declared, but exposes no named fields.
No examples provided.
session_save_credentials Session Save Credentials ~101
Save HEB login credentials for automatic login. Credentials are stored securely using: - OS keyring (macOS Keychain, Windows Credential Manager, Linux Secret Service) - Encrypted file fallback when keyring is unavailable After saving, session_refresh will automatically use these credentials when your session expires, eliminating manual browser login.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | Your HEB.com account email address | |
| password | string | yes | Your HEB.com account password |
Structured output declared, but exposes no named fields.
No examples provided.
session_save_instructions Session Save Instructions ~53
Get instructions for saving browser session cookies. Call this to get step-by-step instructions for authenticating via Playwright MCP and saving the session for fast API access. For automatic session extraction, use session_refresh instead.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
session_status Session Status ~119
Get current session status including token lifecycle and credential storage. Returns comprehensive session information: - authenticated: Whether session is valid - needs_refresh: Whether refresh is required now (token expired) - refresh_recommended: Whether proactive refresh is advised (< 4 hours remaining) - time_remaining_hours: Hours until token expires - expires_at: ISO timestamp of expiration - message: Human-readable status - credentials_stored: Whether HEB credentials are saved for auto-login Use this to check session health before operations or to decide when to proactively refresh.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
store_change Store Change ~130
Change the active store for HEB operations. When authenticated: Changes the store on HEB.com via their API with verification. When not authenticated: Sets a local default for product searches. The store change is VERIFIED by checking the cart's actual store after the mutation. This ensures we never return success when the store didn't actually change (e.g., due to cart conflicts).
| Name | Type | Req | Description |
|---|---|---|---|
| ignore_conflicts | boolean | – | Force store change even if cart has conflicts (items unavailable, price changes). Default False - will fail safely and report conflicts. |
| store_id | string | yes | Store ID to change to |
Structured output declared, but exposes no named fields.
No examples provided.
store_get_default Store Get Default ~29
Get the currently set default store. Returns the default store ID if set, otherwise indicates no default.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
store_search Store Search ~65
Search for HEB stores near an address. Returns stores sorted by distance, including store ID, name, address, and distance from the search location.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | Address or zip code to search near |
| radius_miles | integer | – | Search radius in miles |
Structured output declared, but exposes no named fields.
No examples provided.
How do I install the io.github.mgwalkerjr95/texas-grocery MCP server?
io.github.mgwalkerjr95/texas-grocery runs locally as a PyPI package, launched with uvx texas-grocery-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · texas-grocery-mcp
claude mcp add mgwalkerjr95-texas-grocery -- uvx texas-grocery-mcp
What is the io.github.mgwalkerjr95/texas-grocery MCP server?
io.github.mgwalkerjr95/texas-grocery is an MCP server listed in the public MCP registry as io.github.mgwalkerjr95/texas-grocery. MCP server for HEB grocery store integration - search products, manage carts, clip coupons, and more. This page covers its PyPI package (texas-grocery-mcp).
Is the io.github.mgwalkerjr95/texas-grocery MCP server safe to use?
io.github.mgwalkerjr95/texas-grocery scores 70 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 4 November 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.mgwalkerjr95/texas-grocery MCP server expose?
io.github.mgwalkerjr95/texas-grocery exposes 25 tools: store_search, store_get_default, store_change, product_search, product_search_batch, and 20 more. Their descriptions and schemas cost roughly 2,082 tokens of context every time the server is loaded.
Is the io.github.mgwalkerjr95/texas-grocery MCP server still maintained?
io.github.mgwalkerjr95/texas-grocery is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.mgwalkerjr95/texas-grocery MCP server under?
io.github.mgwalkerjr95/texas-grocery declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.