Parsley MCP by usefulapi
io.usefulapi/parsleyusefulapi.iostreamable-httpv1.0.0Scanned
Read Parsley menu items, nutrition, allergens, ingredients and events; record event sales and waste.
15 tools: 3 can delete or cancel things, 1 change things and 11 only read.
- Reads private data · 1
- Reads text others write · 15
- Can send data out · 0
- No findings
Anlyon alternative
4 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
15 tools
Deletes or cancels 3Claude Code: deny
parsley_record_event_salesWRITE: push sold quantities per menu item to a cafe/hot bar event, which feeds Parsley's cost and usage reports.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "write": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it WRITE: push sold quantities per menu item to a cafe/hot bar event, which feeds Parsley's cost and usage reports. Other event types are refused by Parsley, as is a menu item with no made quantity on the event. Sending the same quantities again overwrites rather than adds. PUT /events/{id}/sales.
Annotations the server declares
- title: Record event sales
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
parsley_record_waste_leftoverWRITE: push waste and/or leftover quantities per menu item to a cafe/hot bar event.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "write": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it WRITE: push waste and/or leftover quantities per menu item to a cafe/hot bar event. If no sold quantity exists, Parsley derives it as made minus waste minus leftover. Parsley refuses amounts above what was made minus sold. Sending the same quantities again overwrites rather than adds. PUT /events/{id}/waste_leftover.
Annotations the server declares
- title: Record waste and leftover
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
parsley_update_event_coversWRITE: set the forecast and/or actual number of covers (guests served) on an event.Reads text others writeNo findings
Why it is in this group
- The name "parsley_update_event_covers" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it WRITE: set the forecast and/or actual number of covers (guests served) on an event. Only the fields you pass change. actual_covers works only on cafe/hot bar events. Setting the same values again has no further effect. PATCH /events/{id}.
Annotations the server declares
- title: Update event covers
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
Changes things 1Claude Code: ask
parsley_create_eventWRITE: create an event (a workday, shift, service or catering event) in Parsley with its menu items.Reads text others writeNo findings
Why it is in this group
- The name "parsley_create_event" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it WRITE: create an event (a workday, shift, service or catering event) in Parsley with its menu items. This changes the account's production plan and is NOT idempotent: calling it twice creates two events. Returns the new event id. Use parsley_list_events first to avoid duplicates. POST /events.
Annotations the server declares
- title: Create event
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Only reads 11Show 11 read-only tools
parsley_get_eventOne event with its metadata and all line items (menu item, amount, unit, station, section).Reads text others writeNo findings
Why it is in this group
- The name "parsley_get_event" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One event with its metadata and all line items (menu item, amount, unit, station, section). GET /events/{id}.
Annotations the server declares
- title: Get event
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
parsley_get_ingredientOne ingredient in full: unit conversions, supported units, tags, the supply options (supplier, SKU, pack size, cost) used for costing and the preparations with yield.Reads text others writeNo findings
Why it is in this group
- The name "parsley_get_ingredient" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One ingredient in full: unit conversions, supported units, tags, the supply options (supplier, SKU, pack size, cost) used for costing and the preparations with yield. Parsley limits this call to 1 request every 3 seconds, so fetch ingredients one at a time. GET /ingredients/{id}.
Annotations the server declares
- title: Get ingredient
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
parsley_list_chef_tagsList the chef tags (id, name) that recipes are attributed to.Reads text others writeNo findings
Why it is in this group
- The name "parsley_list_chef_tags" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List the chef tags (id, name) that recipes are attributed to. Only meaningful for accounts with Chef IDs enabled. GET /tags/chefs.
Annotations the server declares
- title: List chef tags
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
parsley_list_chef_usersList the chef users of the account: id, email, join date, active flag, permission level and the chef tag they are tied to.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "parsley_list_chef_users" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it List the chef users of the account: id, email, join date, active flag, permission level and the chef tag they are tied to. Only meaningful for accounts with Chef IDs enabled. GET /users/chefs.
Annotations the server declares
- title: List chef users
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
parsley_list_eventsList events (a workday, shift, service or catering event) that fall in a date window: id, name, type (standard, cafe-hot-bar, sale, forecast), date, start and end time, menu id.Reads text others writeNo findings
Why it is in this group
- The name "parsley_list_events" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List events (a workday, shift, service or catering event) that fall in a date window: id, name, type (standard, cafe-hot-bar, sale, forecast), date, start and end time, menu id. A bare date means the whole day in the account timezone. GET /events.
Annotations the server declares
- title: List events
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
parsley_list_ingredientsList the ingredients that can be used in recipes: id, parent id, name, label name, item number, supported units, and whether a recipe uses it.Reads text others writeNo findings
Why it is in this group
- The name "parsley_list_ingredients" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List the ingredients that can be used in recipes: id, parent id, name, label name, item number, supported units, and whether a recipe uses it. The API returns the whole list at once; search/limit/offset slice it here. GET /ingredients.
Annotations the server declares
- title: List ingredients
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
parsley_list_serving_stationsList the serving stations (id, name) that menu items and event line items can be assigned to.Reads text others writeNo findings
Why it is in this group
- The name "parsley_list_serving_stations" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List the serving stations (id, name) that menu items and event line items can be assigned to. GET /tags/serving_stations.
Annotations the server declares
- title: List serving stations
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data1
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write15
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http parsley https://parsley.usefulapi.io/mcpclaude mcp add --transport http parsley https://parsley.usefulapi.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__parsley__parsley_list_menu_items",
"mcp__parsley__parsley_get_menu_item",
"mcp__parsley__parsley_list_menus",
"mcp__parsley__parsley_get_menu",
"mcp__parsley__parsley_list_ingredients",
"mcp__parsley__parsley_get_ingredient",
"mcp__parsley__parsley_list_events",
"mcp__parsley__parsley_get_event",
"mcp__parsley__parsley_list_serving_stations",
"mcp__parsley__parsley_list_chef_tags",
"mcp__parsley__parsley_list_chef_users"
],
"ask": [
"mcp__parsley__parsley_create_event"
],
"deny": [
"mcp__parsley__parsley_update_event_covers",
"mcp__parsley__parsley_record_event_sales",
"mcp__parsley__parsley_record_waste_leftover"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as parsley. Review it before you use it.
Capability tags behind 15 rules
- mcp__parsley__parsley_list_menu_items untrusted-input
- mcp__parsley__parsley_get_menu_item untrusted-input
- mcp__parsley__parsley_list_menus untrusted-input
- mcp__parsley__parsley_get_menu untrusted-input
- mcp__parsley__parsley_list_ingredients untrusted-input
- mcp__parsley__parsley_get_ingredient untrusted-input
- mcp__parsley__parsley_list_events untrusted-input
- mcp__parsley__parsley_get_event untrusted-input
- mcp__parsley__parsley_list_serving_stations untrusted-input
- mcp__parsley__parsley_list_chef_tags untrusted-input
- mcp__parsley__parsley_list_chef_users private-data, untrusted-input
- mcp__parsley__parsley_create_event untrusted-input
- mcp__parsley__parsley_update_event_covers untrusted-input
- mcp__parsley__parsley_record_event_sales untrusted-input
- mcp__parsley__parsley_record_waste_leftover untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/parsley/verify?hash=92fb4bb42dea5fc194ce21b846124e58e6ec0b5cb56e395991a07273195a8db6" | jq -e '.changed == false'Pinned hash 92fb4bb42dea, from Oct 25, 2026, 07:17 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.usefulapi/parsley/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.usefulapi/parsley)Source: MCP Registry · repository. Synced Oct 25, 2026, 07:17 UTC.