bring-mcp
Health Pass
- License — License: MIT
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Community trust — 13 GitHub stars
Code Fail
- rm -rf — Recursive force deletion command in package.json
- process.env — Environment variable access in src/bringClient.ts
- process.env — Environment variable access in src/index.ts
Permissions Pass
- Permissions — No dangerous permissions requested
This MCP server acts as a bridge between AI applications (like Claude Desktop) and the Bring! Shopping list API. It allows you to view, modify, and manage your shopping lists using natural language commands.
Security Assessment
Overall Risk: Medium. The server accesses sensitive data, specifically your Bring! account credentials (email and password) via environment variables, which is the expected authentication method. It does not request dangerous system permissions and appears free of hardcoded secrets. However, the automated scan flagged a recursive force deletion command (`rm -rf`) in the package.json file. While potentially common in build scripts, developers should quickly verify that this command is strictly confined to a safe context. Additionally, it relies on an unofficial API to make external network requests, meaning the server communicates over the internet to function.
Quality Assessment
The project is active and well-maintained, with its last push occurring today. It includes a clear description and uses the permissive MIT license. Community trust is currently low, reflected by a modest 13 GitHub stars. Because this is a personal project, users should be aware that it lacks the rigorous oversight of a larger organization and could break if the unofficial Bring! API changes.
Verdict
Use with caution — the tool is actively maintained and functional, but requires your account credentials, relies on an unofficial API, and contains a flagged deletion command that warrants a quick manual review before execution.
MCP Server for Bring! Shopping
MCP Server for Bring! Shopping

This project implements a local Model Context Protocol (MCP) server in TypeScript that exposes the functionalities of the Bring! shopping list API. It enables applications like Claude Desktop to interact with your Bring! shopping lists using standardized MCP tools.
The server integrates the bring-shopping npm package for Bring! API access and leverages @modelcontextprotocol/sdk to provide an MCP-compliant server interface.
Disclaimer:
This is a personal project. I am not affiliated with Bring! Labs AG in any way.
This project uses an unofficial Bring! API, which may change or be blocked at any time.
This could cause the MCP server to stop functioning without prior notice.
🧩 Recommended Claude Desktop Configuration
To use this server in Claude Desktop via npx, insert the following into your claude_desktop_config.json file:
{
"mcpServers": {
"bring-mcp": {
"command": "npx",
"args": ["-y", "bring-mcp@latest"],
"env": {
"MAIL": "[email protected]",
"PW": "YOUR_BRING_PASSWORD_HERE"
}
}
}
}
This is the recommended and most portable configuration. It ensures you always use the latest version published to npm without needing local installation.
🚀 Features
- Automatic Authentication: No manual login required - authentication happens automatically on first API call
- Exposes Bring! API functions as MCP tools:
- 🧾 Load shopping lists
- 🛒 Get and modify items (add, remove, move)
- 📦 Batch operations (save multiple items, delete multiple items)
- 🖼 Save/remove item images
- 👥 Manage list users
- 🎯 Get default shopping list UUID
- 🌐 Load translations & catalog
- 📨 Retrieve pending invitations
- Communicates via STDIO (for use with Claude Desktop or MCP Inspector)
- Supports Bring! credentials via
.envfile or injected environment variables
Available Tools
loadLists: Load all shopping lists from Bring!getItems: Get all items from a specific shopping listgetItemsDetails: Get details for items in a listsaveItem: Save an item to a shopping list with optional specificationsaveItemBatch: Save multiple items to a shopping list in one operationremoveItem: Remove an item from a specific shopping listmoveToRecentList: Move an item to the recently used items listdeleteMultipleItemsFromList: Delete multiple items from a list by their namessaveItemImage: Save an image for an item on a shopping listremoveItemImage: Remove an image from an itemgetAllUsersFromList: Get all users associated with a shopping listgetUserSettings: Get settings for the authenticated usergetDefaultList: Get the UUID of the default shopping list (use when user doesn't specify a list)loadTranslations: Load translations for the Bring! interfaceloadCatalog: Load the Bring! item cataloggetPendingInvitations: Get pending invitations to join shopping lists
⚙️ Setup and Installation
Clone the repo (or obtain the files)
Navigate into the project directory:
cd path/to/bring-mcpInstall dependencies:
npm installCreate
.envfile (if not injecting ENV directly):[email protected] PW=your_passwordBuild the project:
npm run buildMake script executable (optional on Unix):
chmod +x build/src/index.js
🏃 Running the Server
Launch the MCP server with:
node build/src/index.js
If successful, you'll see: MCP server for Bring! API is running on STDIO (on stderr).
🧪 Testing with MCP Inspector
Ensure
npm run buildhas been executed.Ensure
.envwith valid credentials exists.Run Inspector:
npx @modelcontextprotocol/inspector node /ABS/PATH/bring-mcp/build/src/index.js
🧩 Claude Desktop Integration (Manual Local Setup)
Alternatively, if you prefer a locally built and installed version:
{
"mcpServers": {
"mcp-bring": {
"command": "node",
"args": ["/ABSOLUTE/PATH/TO/bring-mcp/build/src/index.js"],
"env": {
"MAIL": "[email protected]",
"PW": "YOUR_BRING_PASSWORD_HERE"
}
}
}
}
🔧 Development
Testing
Run tests with:
npm run test
This command runs formatting, linting, and Jest tests with coverage reporting.
For CI testing:
npm run test:ci
Building
Build the project:
npm run build
Key Dependencies
@modelcontextprotocol/sdk: For MCP server implementation@modelcontextprotocol/inspector: For testing and debugging MCP serversbring-shopping: Node.js wrapper for the Bring! APIzod: For schema definition and validationdotenv: For managing environment variables
✅ Final Notes
- 🔒 Avoid committing your
.envfile. - 🧼 Keep credentials out of version control.
- 🛠 MCP Inspector is invaluable for debugging.
- 🔄 Authentication is handled automatically - no manual login required.
- 📦 Use batch operations for efficiency when working with multiple items.
Happy coding with MCP and Bring! 🎉
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found