McDonald's China (mstore)

McDonald's China coupon redemption, query, and points checking. Use when user wants to (1) Query or claim McDonald's coupons, (2) Check available coupons, (3...

Security Scan

The skill appears to implement the advertised McDonald's China functionality, but metadata and instructions disagree about required credentials and the setup modifies your shell profile and recommends a third‑party brew tap — details you should verify before installing.

Purpose & Capability

The skill's name, description, SKILL.md, reference API, and provided CLI (scripts/mcd.py) are consistent with McDonald's China MCP operations (coupons, points, ordering). However the registry metadata claims no required environment variables while the SKILL.md and the CLI both require an MCDCN_MCP_TOKEN — this metadata omission is an inconsistency.

Instruction Scope

Runtime instructions are narrowly focused on MCP API calls and token configuration. They instruct the user to set MCDCN_MCP_TOKEN or run scripts/setup.sh which writes to the user's shell profile and exports the token to the current session. Writing to the user's shell profile is within scope for persisting a credential but is a privileged action (modifies user config) and should be highlighted to users.

Install Mechanism

The package itself has no install spec (instruction-only), which is low risk. SKILL.md recommends installing a third‑party brew formula (ryanchen01/tap/mcd-cn) — that external package is not part of this bundle and introduces trust considerations; the included scripts are plain Python and a shell setup script (no obfuscated code or downloads).

Credentials

The skill legitimately needs a single MCP token (MCDCN_MCP_TOKEN) to access the user's McDonald's account. However the registry metadata does not declare this required env var (it lists none), which is inconsistent and could mislead users about what secrets the skill needs. The code also looks for a local ~/.mcd-cn.env file as an alternate token source — this is reasonable but means the token could be read from that file if present.

Persistence & Privilege

The skill does not request always:true and does not appear to modify other skills or system-wide settings. The setup script will add an export line to a detected shell profile (~/.zshrc, ~/.bash_profile, or ~/.bashrc), which is a normal way to persist a credential but is a filesystem-write action affecting your shell environment and should be acknowledged before running.

What to consider before installing

This skill appears to implement the McDonald's China MCP API and requires only your MCP token (MCDCN_MCP_TOKEN). Before installing or running: 1) Verify the registry metadata is corrected to declare the required MCDCN_MCP_TOKEN (the SKILL.md and code do require it). 2) Inspect the third‑party brew formula (ryanchen01/tap/mcd-cn) before running brew install — the skill suggests but does not bundle that install. 3) Be aware setup.sh will modify your shell profile (~/.zshrc, ~/.bash_profile, or ~/.bashrc) to store the token; if you prefer not to persist the token, export it only into your current session instead of running the script. 4) Confirm the MCP endpoints (open.mcd.cn / mcp.mcd.cn) are legitimate and that the token you provide is only used for your McDonald's account. 5) If you have concerns, ask the publisher to: add MCDCN_MCP_TOKEN to the declared required env vars, document exactly what the brew formula contains, and provide checksums or a trusted source for any external packages.

McDonald's China (麦麦) Skill

First Time Setup

On first use, you must configure the MCP Token:

1. Get your token from: https://open.mcd.cn/mcp
   • Login with your phone number (must match your McDonald's app account)
   • Click "控制台" (Console) → "激活" (Activate) to generate MCP Token
2. Set the token as an environment variable:

   export MCDCN_MCP_TOKEN="your_token_here"
   

Or run the setup script:

./scripts/setup.sh

Available Tools

Coupons (麦麦省领券)

Command	Description
mcd-cn available-coupons	Query coupons available to claim
mcd-cn auto-bind-coupons	Auto-claim all available coupons
mcd-cn my-coupons	List already claimed coupons

Points (麦麦商城)

Command	Description
mcd-cn query-my-account	Query points balance and account info
mcd-cn mall-points-products	List products redeemable with points
mcd-cn mall-product-detail	Get details of a specific points product
mcd-cn mall-create-order	Redeem points for a product

Calendar (麦麦日历)

Command	Description
mcd-cn campaign-calender	Query monthly marketing activities

Ordering (点餐)

Command	Description
mcd-cn delivery-query-addresses	List saved delivery addresses
mcd-cn delivery-create-address	Add new delivery address
mcd-cn query-store-coupons	Query coupons for specific store
mcd-cn query-meals	Query menu for a store
mcd-cn query-meal-detail	Get meal details
mcd-cn calculate-price	Calculate order price
mcd-cn create-order	Create delivery order
mcd-cn query-order	Query order status

Nutrition (餐品营养)

Command	Description
mcd-cn list-nutrition-foods	Get nutrition info for menu items

General

Command	Description
mcd-cn now-time-info	Get current server time

Usage Examples

Check available coupons to claim

mcd-cn available-coupons

Auto-claim all available coupons

mcd-cn auto-bind-coupons

Check my claimed coupons

mcd-cn my-coupons

Check points balance

mcd-cn query-my-account

List points redemption products

mcd-cn mall-points-products

Query this month's campaigns

mcd-cn campaign-calender

Requirements

• mcd-cn CLI: Install via brew install ryanchen01/tap/mcd-cn
• MCDCN_MCP_TOKEN: Get from https://open.mcd.cn/mcp

MCP Server Info

• Server URL: https://mcp.mcd.cn
• Protocol: Streamable HTTP
• Rate Limit: 600 requests/minute per token
• Version: MCP 2025-06-18

Notes

• Token is linked to the phone number used during login at open.mcd.cn
• Coupons and points are tied to your McDonald's account
• Some features may require the user to have a valid delivery address set up