Toast MCP Server and API by Cotlet

Name: Toast MCP Server and API by Cotlet
Author: cotlet

@cotletMCP server · External

Toast restaurant point of sale MCP server: list menus, list menu items, 86 a menu item.

Restaurantsv1.0.2

Freeno charge per call

One address for any MCP client. No sign-in needed on this server.

Safety · AI9%Low risk
Does · AIWritesCreates or changes data
ConnectRemote · no sign-inStreamable HTTP
PopularityNo stars yetUpdated 10 Nov 2026
StatusUnreachableChecked facts, not AI

Overview Tools Trust Requirements Details Similar

What it does

Reads
Writes
High impact

At most: creates or changes data: records, files, settings.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Tools

None listed · checked 10 Nov 2026

Odel could not list its tools without signing in.

Try it in the Inspector

No README yet. What Odel knows about this module is on the right.

Checked by Odel

Registry verified the namespace dev.cotlet
Endpoint is on the publisher's own domain
The endpoint has not answered since 10 Nov.

Assessed by AIJev

Harmful: 9%
First-party: 48%
High impact: 6%
Adult content: 1%

Read from the listing and README on 11 Nov 2026. AI can make mistakes: a guide, not a check.

Requirements

Runs: Remote, on cotlet.dev
Transport: Streamable HTTP
Sign-in: None
Credentials: None asked
Clients: Any MCP client

https://cotlet.dev/mcp/v1/toast/connect

The publisher’s server itself; Odel doesn’t run it. Added to your modules, Odel fronts it with one address.

Details

Version: 1.0.2
Updated: 10 Nov 2026
Registry name: dev.cotlet/toast

cotlet.dev
Registry listing

Similar modules

Browse Restaurants

MCP server: One MCP server.
Zomato MCPRun by its publisher: served from their own domain, namespace checked by the registry.
@zomato · External187 GitHub stars.
An MCP server that exposes functionalities to use Zomato's services.
9% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; it needs your API key.Free to use.
9% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; it needs your API key.Free to use.
9% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; it needs your API key.Free to use.
MCP server: One MCP server.
KrabiClaw
@krabiclaw · External8 GitHub stars.
Manage and publish restaurant and local business websites through MCP.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
MCP server: One MCP server.
Resy
@chrischall · External2 GitHub stars.
Resy reservation management — search, book, cancel, favorites, and Priority Notify for Claude
16% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
16% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
16% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
aloha.fyi Hawaii
@baphometnxg · External2 GitHub stars.
Read-only Hawaii MCP: 2,500+ tours, 600+ restaurants, events, weather, day itineraries, 4 islands.
4% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
4% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
4% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
MCP server: One MCP server.
Dine MCP
@benjamin-di · External1 GitHub stars.
Restaurant table availability across SevenRooms, TableCheck and ResDiary. Read-only; never books.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Pearl
@pearl-passport · External1 GitHub stars.
Pearl places, table availability, and confirmed visit, save and trip actions for reviewed hosts.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
MCP server: One MCP server.
Trusgent MCP
@trusgent · External1 GitHub stars.
Trusgent MCP — Trust Layer for AI agents. HK registry + Agent Cards. Default: get_merged_profile.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
MCP server: One MCP server.
NUMRun by its publisher: served from their own domain, namespace checked by the registry.
@itsnum · External1 GitHub stars.
Real places for your agent: search 2.5M+ travel places, list businesses, license place photos.
4% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.A remote server; no sign-in.The repository cannot be reached since 8 Nov.Free to use.
4% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.A remote server; no sign-in.The repository cannot be reached since 8 Nov.Free to use.
4% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.A remote server; no sign-in.The repository cannot be reached since 8 Nov.Free to use.

MCP server: One MCP server.
Trainerfu by CotletRun by its publisher: served from their own domain, namespace checked by the registry.
@cotlet · External
Trainerfu's coaching work connects training plans, activity and client conversations.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
MCP server: One MCP server.
Sprout Studio by CotletRun by its publisher: served from their own domain, namespace checked by the registry.
@cotlet · External
Sprout Studio puts a photography lead, shoot and client paperwork in one business workflow.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
MCP server: One MCP server.
TotalCoaching by CotletRun by its publisher: served from their own domain, namespace checked by the registry.
@cotlet · External
A TotalCoaching plan is only part of the coaching record.
9% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
9% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
9% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
MCP server: One MCP server.
Rosy Salon Software by CotletRun by its publisher: served from their own domain, namespace checked by the registry.
@cotlet · External
A Rosy appointment belongs to a client, a service and a stylist.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
MCP server: One MCP server.
Pabau by CotletRun by its publisher: served from their own domain, namespace checked by the registry.
@cotlet · External
This Pabau connection is limited to scheduling and contact work.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
MCP server: One MCP server.
Pike13 by CotletRun by its publisher: served from their own domain, namespace checked by the registry.
@cotlet · External
Pike13 separates the client, the event and the plan that pays for the visit.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
MCP server: One MCP server.
ClubReady by CotletRun by its publisher: served from their own domain, namespace checked by the registry.
@cotlet · External
A trial visit, an unanswered sales lead and an expiring agreement need different next steps.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
MCP server: One MCP server.
Bookipi by CotletRun by its publisher: served from their own domain, namespace checked by the registry.
@cotlet · External
Bookipi's business records connect the client, estimate and invoice.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.