← 返回 Skills 市场
mcdonalds-mcp-order-lite
作者
danielliao
· GitHub ↗
· v1.0.0
· MIT-0
311
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install mcdonalds-mcp-order-lite
功能描述
Place McDonald's China delivery orders through the official MCP server at https://mcp.mcd.cn using a Bearer MCP token over Streamable HTTP / JSON-RPC. Use wh...
安全使用建议
This skill implements McDonald's China MCP ordering and will contact https://mcp.mcd.cn using a Bearer token, but the registry metadata omits the required environment variables. Before installing: (1) treat MCD_MCP_TOKEN as a secret — only provide it if you trust the skill source; (2) verify where the package came from (there's no homepage/source URL); (3) consider running the code in a sandbox to confirm network behavior; (4) ensure your environment has required Python deps (requests and OpenClaw runtime) and decide how you'll securely store the token (platform secret store, not plaintext env if possible); (5) if you need higher assurance, ask the publisher to update metadata to declare required env vars and provide a source repo or signed release. If the publisher cannot justify the missing credential declaration or provide a trusted source, treat this package as untrusted.
功能分析
Type: OpenClaw Skill
Name: mcdonalds-mcp-order-lite
Version: 1.0.0
The skill bundle is a legitimate integration for the McDonald's China MCP (Model Context Protocol) service, allowing an AI agent to browse menus and place delivery orders. The code (client.py, tools.py) implements standard API interactions using the requests library, and the instructions in SKILL.md explicitly mandate user confirmation of prices before order creation. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found; sensitive credentials like the MCP token are handled via environment variables as expected for this architecture.
能力评估
Purpose & Capability
The name, SKILL.md, and included files (client.py, scripts/mcd_rpc.py, tools.py, nlp_processor.py) consistently implement McDonald's China MCP ordering functionality against https://mcp.mcd.cn. The code provides menu, order creation, pricing, and intent parsing as advertised, so capabilities align with purpose.
Instruction Scope
Runtime instructions in SKILL.md describe the MCP JSON-RPC flow and the required steps (query addresses, calculate-price, create-order, etc.). The code follows that flow and only references network calls to the MCP server and user-provided data (addresses, items, location). There are no instructions to read unrelated system files or exfiltrate data to unknown endpoints.
Install Mechanism
There is no install spec (instruction-only from a packaging perspective), and no remote downloads — low install risk. However, the package includes Python code that depends on libraries (requests, urllib) and OpenClaw runtime APIs (openclaw.skill). Those runtime dependencies are not declared in the registry metadata; the skill will fail or behave unexpectedly if the runtime lacks required libs or the OpenClaw API.
Credentials
The registry metadata lists no required environment variables or primary credential, but client.py and scripts/mcd_rpc.py clearly read MCD_MCP_TOKEN (and optionally MCD_MCP_URL). SKILL.md explicitly instructs use of 'Authorization: Bearer <TOKEN>'. This mismatch is a material incoherence: the skill requires a sensitive token (Bearer token) to function, yet the package metadata does not declare or explain that. No other unrelated credentials are requested, but the omission makes it unclear how the token should be supplied/managed.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide config, and appears to only register tools via openclaw.skill.tool. Autonomous invocation is allowed (platform default) but not combined with other broad privileges. The skill does not write installers or run remote code downloads.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mcdonalds-mcp-order-lite - 安装完成后，直接呼叫该 Skill 的名称或使用
/mcdonalds-mcp-order-lite触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of mcdonalds-mcp-order-lite for McDonald’s China delivery ordering via the official MCP server.
- Supports browsing deliverable addresses, store menus, meal details, coupons, price calculation, and order creation/status.
- Uses secure Bearer MCP token authentication; no embedded tokens included.
- Designed for easy client integration with clear workflow documentation.
- Lite package with only core reusable files and minimal dependencies.
元数据
常见问题
mcdonalds-mcp-order-lite 是什么？
Place McDonald's China delivery orders through the official MCP server at https://mcp.mcd.cn using a Bearer MCP token over Streamable HTTP / JSON-RPC. Use wh... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 311 次。
如何安装 mcdonalds-mcp-order-lite？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mcdonalds-mcp-order-lite」即可一键安装，无需额外配置。
mcdonalds-mcp-order-lite 是免费的吗？
是的，mcdonalds-mcp-order-lite 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
mcdonalds-mcp-order-lite 支持哪些平台？
mcdonalds-mcp-order-lite 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 mcdonalds-mcp-order-lite？
由 danielliao（@danielliao）开发并维护，当前版本 v1.0.0。
推荐 Skills