by tomaspavlin
MCP server that lets you shop groceries across the Rohlik Group platforms (Rohlik.cz, Knuspr.de, Gurkerl.at, Kifli.hu, Sezamo.ro)
# Add to your Claude Code skills
git clone https://github.com/tomaspavlin/rohlik-mcpGuides for using mcp servers skills like rohlik-mcp.
Last scanned: 5/30/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: Anthropic's MCP TypeScript SDK has a ReDoS vulnerability",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "body-parser: body-parser is vulnerable to denial of service when url encoding is used",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Denial of Service via sequential optional groups",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "rollup: Rollup 4 has Arbitrary File Write via Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vite: vite allows server.fs.deny bypass via backslash on Windows",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-05-30T16:36:47.495Z",
"npmAuditRan": true,
"pipAuditRan": true
}rohlik-mcp is an open-source mcp servers skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by tomaspavlin. MCP server that lets you shop groceries across the Rohlik Group platforms (Rohlik.cz, Knuspr.de, Gurkerl.at, Kifli.hu, Sezamo.ro). It has 113 GitHub stars.
rohlik-mcp returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/tomaspavlin/rohlik-mcp" and add it to your Claude Code skills directory (see the Installation section above).
rohlik-mcp is primarily written in TypeScript. It is open-source under tomaspavlin on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other MCP Servers skills you can browse and compare side by side. Open the MCP Servers category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh rohlik-mcp against similar tools.
No comments yet. Be the first to share your thoughts!
Top skills in this category by stars
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
Enhance your favourite LLM with capabilities to buy groceries.
[!WARNING] This MCP server is made for study purposes with use of reverse engineered Rohlik API. It is for personal use only.
This is a Model Context Protocol (MCP) server that enables AI assistants to interact with the Rohlik Group's online grocery delivery services across multiple countries. This server provides tools for searching products, managing shopping carts, and accessing account info.
Supported Services:
Example LLM prompts that work very well with the Rohlik MCP:
🛒 Regular Shopping:
🤖 Smart Shopping:
💰 Deals & Discounts:
📅 Planning:
New to Rohlik MCP? Check out our Complete Guide for Newcomers!
Add the MCP to Claude Desktop configuration:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%/Claude/claude_desktop_config.jsonAdd the following configuration:
{
"mcpServers": {
"rohlik": {
"command": "npx",
"args": ["-y", "@tomaspavlin/rohlik-mcp"],
"env": {
"ROHLIK_USERNAME": "your-email@example.com",
"ROHLIK_PASSWORD": "your-password",
"ROHLIK_BASE_URL": "https://www.rohlik.cz"
}
}
}
}
The server supports multiple Rohlik regions by setting the ROHLIK_BASE_URL environment variable:
https://www.rohlik.cz (default)https://www.knuspr.dehttps://www.gurkerl.athttps://www.kifli.huhttps://www.sezamo.rohttps://www.sezamo.ithttps://www.sezamo.esIf ROHLIK_BASE_URL is not specified, it defaults to the Czech version.
search_products - Search for grocery products by name with filtering optionsadd_to_cart - Add multiple products to your shopping cartget_cart_content - View current cart contents and totalsremove_from_cart - Remove items from your shopping cartget_shopping_list - Retrieve shopping lists by IDget_meal_suggestions - Get personalized suggestions for breakfast, lunch, dinner, snacks, baking, drinks, or healthy eating based on your order historyget_frequent_items - Analyze order history to find most frequently purchased items (overall + per category)get_shopping_scenarios - Interactive guide showing what you can do with the MCPget_discounted_items - Browse currently discounted items (cenové trháky), optionally filtered by food category, with sorting and paginationget_account_data - Get comprehensive account information including delivery details, orders, announcements, cart, and premium statusget_order_history - View your past delivered orders with detailsget_order_detail - Get detailed information about a specific order including all productsget_upcoming_orders - See your scheduled upcoming ordersget_delivery_info - Get current delivery information and feesget_delivery_slots - View available delivery time slots for your addressget_premium_info - Check your Rohlik Premium subscription status and benefitsget_announcements - View current announcements and notificationsget_reusable_bags_info - Track your reusable bags and environmental impactnpm install
npm run build
npm run build - Compile TypeScript to JavaScriptnpm start - Launch the production servernpm run dev - Start development mode with watchnpm run inspect - Test with MCP Inspectornpm test - Run unit testsnpm run test:watch - Run tests in watch modenpm run test:coverage - Generate test coverage reportThe project includes unit tests for smart shopping data transformation logic:
# Run all tests
npm test
# Run tests in watch mode (development)
npm run test:watch
# Generate coverage report
npm run test:coverage
What's tested:
get_frequent_items)get_meal_suggestions)See tests/README.md for detailed testing documentation.
Add this to configuration:
{
"mcpServers": {
"rohlik-local": {
"command": "node",
"args": ["/path/to/rohlik-mcp/dist/index.js"],
"env": {
"ROHLIK_USERNAME": "your-email@example.com",
"ROHLIK_PASSWORD": "your-password",
"ROHLIK_BASE_URL": "https://www.rohlik.cz"
}
}
}
}
If you're experiencing authentication issues, enable debug mode to see detailed logs:
{
"mcpServers": {
"rohlik-local": {
"command": "node",
"args": ["/path/to/rohlik-mcp/dist/index.js"],
"env": {
"ROHLIK_USERNAME": "your-email@example.com",
"ROHLIK_PASSWORD": "your-password",
"ROHLIK_BASE_URL": "https://www.rohlik.cz",
"ROHLIK_DEBUG": "true"
}
}
}
}
Debug logs will appear in ~/Library/Logs/Claude/mcp-server-rohlik-local.log (macOS) or %APPDATA%/Claude/logs/mcp-server-rohlik-local.log (Windows).
You can test the MCP server using the official MCP Inspector (https://modelcontextprotocol.io/legacy/tools/inspector):
npm run inspect
In the Inspector, set the ROHLIK_USERNAME and ROHLIK_PASSWORD envs.
To validate that all Rohlik API endpoints are working correctly and diagnose authentication issues:
npm run validate-api
This will:
tests/validation-results.jsontests/validation-report.htmlThe validator automatically loads credentials from your Claude Desktop config or environment variables. Open the HTML report in your browser for an easy-to-read summary of all tests.
For your config file, instead of %APPDATA%/Claude/claude_desktop_config.json use C:\Users\[YOUR WINDOWS USER]\AppData\Local\Packages\Claude_pzs8sxrjxfjjc\LocalCache\Roaming\Claude\claude_desktop_config.json
Possible causes:
Solutions:
claude_desktop_config.json"ROHLIK_DEBUG": "true" in env section~/Library/Logs/Claude/mcp-server-rohlik*.log (macOS) or %APPDATA%\Claude\logs\mcp-server-rohlik*.log (Windows)npm run validate-api to test all endpointsCause: Your account has no past orders, or orders are not accessible
Solution: Ensure you have at least one completed order on Rohlik before using smart shopping features (get_meal_suggestions, get_frequent_items)
Causes:
Solutions:
Causes:
Solutions:
spawn npx ENOENTUnder Claude Desktop, fails with:
spawn npx ENOENT
Server disconnected. Transport closed unexpectedly.
Solutions:
Add ROHLIK_DEBUG to your configuration to see detailed logs:
{
"mcpServers": {
"rohlik-local": {
"command": "node",
"args": ["/path/to/rohlik-mcp/dist/index.js"],
"env": {
"ROHLIK_USERNAME": "your-email@example.com",
"