pancake-pos-mcp
Health Gecti
- License — License: MIT
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Community trust — 19 GitHub stars
Code Uyari
- network request — Outbound network request in src/api-client/pancake-http-client.ts
- process.env — Environment variable access in src/config.ts
- network request — Outbound network request in src/index.ts
Permissions Gecti
- Permissions — No dangerous permissions requested
This MCP server acts as a bridge between AI assistants and the Pancake POS REST API, enabling automated management of e-commerce point-of-sale operations like orders, inventory, and customer data.
Security Assessment
The overall risk is Low. The tool strictly acts as an API wrapper and does not execute any local shell commands or request dangerous system permissions. It does make outbound network requests to the Pancake POS servers (`pos.pages.fm`) to sync your POS data, which is its intended function. It correctly relies on environment variables to handle your API keys rather than hardcoding secrets. Keep in mind that because it manages point-of-sale data, the AI assistant will have access to sensitive business information, including orders, inventory, and CRM contacts.
Quality Assessment
The project is highly active, with its most recent code push occurring today. It uses the permissive MIT license, which is excellent for open-source adoption. While the community is currently small (19 GitHub stars), the repository is well-documented with a clear README, making it easy for developers to understand and implement.
Verdict
Safe to use.
MCP server for Pancake POS — 23 tools across orders, inventory, CRM, multi-channel commerce. Bun + TypeScript, runs on stdio / HTTP / Cloudflare Workers.
Pancake POS MCP
Model Context Protocol (MCP) server wrapping the Pancake POS REST API, enabling AI assistants like Claude to manage Vietnamese e-commerce POS operations with 23 specialized tools and 7 reference resources.
Overview
Pancake POS MCP exposes the Pancake POS API (https://pos.pages.fm/api/v1) as Model Context Protocol tools, allowing Claude and other AI assistants to automate POS management across:
- Core POS: Orders, Products, Customers, Inventory
- Supply Chain: Warehouses, Suppliers, Purchases, Transfers, Stocktaking
- Sales: Returns, Exchanges, Combos, Promotions, Vouchers
- CRM: Contacts, Deals, Activities
- Multi-Channel: eCommerce (Shopee/Lazada/TikTok), Livestream Commerce
- Operations: Employees, Webhooks, Analytics, Shop Info, Address Lookup
Prerequisites
- Bun (runtime) — install from https://bun.sh (
curl -fsSL https://bun.sh/install | bash) - Pancake POS API Key + Shop ID — see Getting Pancake POS credentials below. Note: this is the Pancake POS (e-commerce / inventory) API, not the Pancake user/social-inbox API — different products, different keys.
- Node.js 18+ (optional, for development tooling)
Quick Start
Get from zero to a working MCP server in ~5 minutes:
# 1. Clone the repo
git clone https://github.com/nguyennguyenit/pancake-pos-mcp.git
cd pancake-pos-mcp
# 2. Install dependencies
bun install
# 3. Configure credentials
cp .env.example .env
# Open .env and fill in PANCAKE_POS_API_KEY + PANCAKE_POS_SHOP_ID
# (See "Getting Pancake POS credentials" section below)
# 4. Verify it runs
bun run src/index.ts
# Expected output:
# [pancake-pos-mcp] Server started on stdio transport
# Press Ctrl+C to stop.
# 5. Connect Claude Desktop — see "Stdio Transport" section below
If step 4 prints an error, double-check your .env values and that you ran bun install. Common issues are listed in Troubleshooting.
Getting Pancake POS credentials
⚠️ Pancake POS ≠ Pancake (social inbox). This MCP only works with the Pancake POS product at https://pos.pages.fm — the e-commerce / inventory / order-management system. The Pancake user/inbox API at
pages.fmis a different product with a different API key and is not supported here.
You need two values from your Pancake POS account:
PANCAKE_POS_SHOP_ID— the numeric ID of your shop- Log in to https://pos.pages.fm and check the URL or shop settings to find the numeric shop ID
PANCAKE_POS_API_KEY— your Pancake POS API token- Pancake POS Dashboard → Cài đặt (Settings) → API → Generate API key
- Copy the key immediately — it is only shown once
Keep both values secret. Never commit them to git. The
.gitignorealready excludes.envand.dev.vars.
Configuration
Required (set in Quick Start):
| Variable | Purpose |
|---|---|
PANCAKE_POS_API_KEY |
Pancake POS API token |
PANCAKE_POS_SHOP_ID |
Numeric shop ID |
Optional:
| Variable | Default | Purpose |
|---|---|---|
PANCAKE_POS_BASE_URL |
https://pos.pages.fm/api/v1 |
Override API endpoint |
PORT |
3000 |
HTTP transport port |
MCP_AUTH_TOKEN |
(none) | Bearer token for HTTP/Workers auth |
Usage
Stdio Transport (Claude Desktop)
Default mode. Add to Claude Desktop config claude_desktop_config.json:
{
"mcpServers": {
"pancake-pos": {
"command": "bun",
"args": ["run", "/path/to/pancake-pos-mcp/src/index.ts"]
}
}
}
HTTP Transport (Remote Access)
Enable Streamable HTTP transport:
bun run src/index.ts --http
Server starts at http://localhost:3000/mcp. Health check: http://localhost:3000/health
With authentication (recommended for production):
# .env
PORT=3000
MCP_AUTH_TOKEN=your_secret_token
# Client usage
curl -H "Authorization: Bearer your_secret_token" http://localhost:3000/mcp
Cloudflare Workers (Serverless Edge)
Deploy globally on Cloudflare Workers for low-latency access from anywhere:
# Local development (uses .dev.vars for secrets)
cp .dev.vars.example .dev.vars
# Edit .dev.vars with your credentials
bun run dev:workers
# Runs at http://localhost:8787
# Deploy to Cloudflare
wrangler login
bun run deploy
# Set production secrets
wrangler secret put PANCAKE_POS_API_KEY
wrangler secret put PANCAKE_POS_SHOP_ID
wrangler secret put MCP_AUTH_TOKEN
Workers URL: https://pancake-pos-mcp.<your-subdomain>.workers.dev/mcp
Connect Claude Desktop via mcp-remote:
{
"mcpServers": {
"pancake-pos": {
"command": "npx",
"args": [
"mcp-remote",
"https://pancake-pos-mcp.<your-subdomain>.workers.dev/mcp",
"--header", "Authorization: Bearer <your-token>"
]
}
}
}
Workers characteristics: 8s timeout per upstream call, 2 retries, rate limiter disabled (stateless per-request model). Free tier: 100k requests/day. See deployment guide for full details.
Available Tools
| Tool | Phase | Description |
|---|---|---|
manage_orders |
1 | Create, read, update, delete, print, ship, and manage order status |
manage_products |
1 | Manage product catalog with variations and pricing |
manage_customers |
1 | Customer CRUD, reward points, transaction history |
manage_inventory |
1 | Inventory reports filtered by warehouse, category, supplier |
manage_warehouses |
2 | Warehouse CRUD and configuration |
manage_suppliers |
2 | Supplier contact and profile management |
manage_purchases |
2 | Purchase orders and inbound inventory |
manage_transfers |
2 | Warehouse-to-warehouse transfer management |
manage_stocktaking |
2 | Physical inventory count records |
manage_returns |
3 | Order returns and exchange processing |
manage_combos |
3 | Product bundle deals and time-limited offers |
manage_promotions |
3 | Discount campaigns (percent/amount-based) |
manage_vouchers |
3 | Voucher code generation and usage tracking |
manage_crm_contacts |
4 | CRM contact CRUD and relationship management |
manage_crm_deals |
4 | Sales pipeline opportunities and stages |
manage_crm_activities |
4 | Calls, meetings, tasks, notes tied to contacts/deals |
manage_ecommerce |
4 | Multi-channel sync (Shopee, Lazada, TikTok) |
manage_livestream |
4 | Live selling session management and scheduling |
manage_employees |
5 | Staff management and warehouse assignments |
manage_webhooks |
5 | Event subscription and webhook configuration |
get_statistics |
5 | Analytics for inventory, sales, orders with grouping |
get_shop_info |
5 | Shop profile information and settings |
lookup_address |
5 | Vietnamese address hierarchy (provinces → districts → communes) |
Available Resources
Static reference resources (no authentication required):
| Resource | Contents |
|---|---|
order-statuses |
16 order status codes with Vietnamese/English names |
order-sources |
Sales channel codes (Facebook, Shopee, Lazada, etc.) |
sort-options |
22 sort options for order listing |
webhook-events |
Webhook event types (order.created, order.updated, etc.) |
error-codes |
HTTP error code reference |
rate-limits |
API rate limits (1000/min, 10000/hour) |
shipping-partners |
Live shipping partner data (cached from API) |
Architecture
- API Client: Token-bucket rate limiting (1000/min, 10000/hour), exponential backoff retries (3 attempts)
- Tools: 23 MCP tools organized by business domain
- Schema Validation: Zod with discriminated unions for strict runtime validation
- Transport: Stdio (default) + Streamable HTTP + Cloudflare Workers with optional Bearer token auth
- Error Handling: Structured error responses with code and message
Development
Type Checking
bun run typecheck
Run Tests
bun run test # vitest (includes Workers tests)
Project Structure
src/
├── api-client/ # HTTP layer with rate limiting
│ ├── pancake-http-client.ts
│ ├── request-builder.ts
│ └── response-parser.ts
├── tools/ # 23 MCP tools (23 files)
├── resources/ # MCP reference resources
├── shared/ # Schemas, errors, pagination
├── config.ts # Environment configuration
├── server.ts # MCP server factory
├── worker.ts # Cloudflare Workers entry point
└── index.ts # Entry point (stdio + HTTP)
See docs/code-standards.md for full development guidelines.
Documentation
- codebase-summary.md — Architecture and implementation overview
- system-architecture.md — Detailed system design and data flows
- code-standards.md — TypeScript and tool implementation standards
- project-overview-pdr.md — Project requirements and features
- deployment-guide.md — Setup and deployment instructions
- project-roadmap.md — Implementation progress and milestones
- poscake-api-docs.md — Complete Pancake POS API reference
Troubleshooting
A few non-obvious gotchas:
429 Too Many Requests— hit Pancake rate limit (1000/min, 10000/hour). The built-in token bucket auto-throttles; reduce parallelism on the caller side.- Tests fail with
Cannot find package 'cloudflare:test'— usebun run test(vitest), not nativebun test. Workers tests need the vitest pool worker plugin. - Claude Desktop doesn't see the tools — the
command/argspath inclaude_desktop_config.jsonmust be absolute. Restart Claude Desktop after editing the config.
For other errors, check the error message and verify .env credentials.
License
MIT License — See LICENSE file for full text.
Yorumlar (0)
Yorum birakmak icin giris yap.
Yorum birakSonuc bulunamadi