io.github.ni-c/mealie-mcp is an MCP server that MCP server for Mealie, the self-hosted recipe manager and meal planner. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 60/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"mealie": {
"env": {
"MEALIE_URL": "https://mealie.example.com",
"MEALIE_API_TOKEN": "…"
},
"args": [
"-y",
"@ni-c/mealie-mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
MCP server for Mealie, the self-hosted recipe manager and meal planner
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked @ni-c/mealie-mcp against OSV.dev.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in productivity / entertainment
Official MCP server for Anytype API - your encrypted, local and collaborative wiki.
The official MCP Server for the Mux API
Give Claude the ability to watch and understand videos — Claude Code plugin with frame extraction and multimodal audio analysis
MCP server for monday.com integration.
MCP Security Weekly
Get CVE alerts and security updates for io.github.ni-c/mealie-mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
A Model Context Protocol (MCP) server for Mealie, the self-hosted recipe manager and meal planner.
Lets MCP clients like Claude Code, Claude Desktop or Codex work with your recipe collection: search and read recipes with their ingredients and steps, import new ones from a website, keep tags and categories tidy, plan meals, build shopping lists from those plans, and record what was actually cooked.
Fifty-three tools is the ceiling, not the floor: MEALIE_ALLOW_TOOLS=essential
registers a curated eight instead, and a model picks the right tool far more
reliably from eight than from fifty-four — see
choosing which tools load.

Mealie's REST API has 259 operations across 175 paths. This server exposes 54
tools, chosen so that the common tasks are one call and the dangerous surface is
not reachable at all. Verified against Mealie v3.28.0; the source of truth for
every request shape is the GET /openapi.json of a running instance, not the
published documentation, which is out of date in several places.
Fifty-three curated tools out of 259 API operations. Mealie's REST API is far larger than a model should reach into; what is here covers the common tasks in one call — search, read and import recipes, keep tags and categories tidy, plan meals, build shopping lists, manage cookbooks and ratings.
update_recipe uses PATCH, not PUT. Mealie's replace route silently drops
recipe fields that were not sent; only the fields you name change here.
The dangerous surface is unreachable. No admin routes, no token minting, no webhooks and no outbound-HTTP triggers, whatever the token would allow.