doordash-mcp

An MCP server that lets AI agents order food, groceries, and more through DoorDash. Search restaurants, browse menus, build carts, and place orders — all programmatically.

Built with Bun, Patchright, and the Model Context Protocol SDK.

Why

DoorDash doesn't have a consumer API. The existing community MCPs use brittle scraping or outdated endpoints. This one reverse-engineers DoorDash's GraphQL API by running fetch() inside a real Chromium browser context, bypassing Cloudflare's TLS fingerprinting.

How it works

This MCP runs a headless Patchright (undetected Playwright) browser and executes all DoorDash API calls via page.evaluate(fetch(...)) inside the browser's JavaScript context. GraphQL queries were captured from real DoorDash browser sessions and are stored as .graphql files.

Setup

# Install
git clone https://github.com/anthropics/doordash-mcp.git
cd doordash-mcp
bun install
bunx patchright install chromium

# Configure
mkdir -p ~/.doordash-mcp
echo '{ "doordash": { "email": "your@email.com" } }' > ~/.doordash-mcp/config.json

# Initial login (headed browser — required once to earn Cloudflare clearance)
bun run login

# Add to your MCP client

Cursor

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "doordash": {
      "command": "bun",
      "args": ["/path/to/doordash-mcp/src/server.ts"]
    }
  }
}

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "doordash": {
      "command": "bun",
      "args": ["/path/to/doordash-mcp/src/server.ts"]
    }
  }
}

Tools

21 tools covering the full DoorDash lifecycle:

Discovery

Tool	Description
doordash_search	Search restaurants and stores by name, cuisine, or food type
doordash_menu	Get a restaurant's full menu with items, prices, and option flags
doordash_convenience_search	Search items within grocery/convenience/alcohol stores
doordash_item_options	Get customization options for menu items (sides, extras, sizes)

Cart

Tool	Description
doordash_add_to_cart	Add items to cart (restaurants by name, convenience stores by ID)
doordash_cart	View all active carts with items and subtotals
doordash_modify_cart	Update item quantity or remove items
doordash_delete_cart	Delete a cart

Checkout

Tool	Description
doordash_checkout	Preview fees, delivery time, and total
doordash_place_order	Place an order (charges the account)
doordash_order_status	Check payment and delivery status

Group Orders

Tool	Description
doordash_create_group_order	Create a group order and get a share link
doordash_group_order_status	View each person's items and finalization status

Account

Tool	Description
doordash_login	Automated login (email + OTP)
doordash_verify	Enter OTP verification code
doordash_orders	View order history
doordash_addresses	List saved delivery addresses
doordash_set_address	Set active delivery address
doordash_add_address	Add a new delivery address
doordash_payment_methods	List saved payment methods
doordash_add_card	Add a payment card (tokenized via Stripe)

Authentication (WIP)

Auth is a work in progress. Fully automated headless login is not yet reliable due to Cloudflare's anti-bot protections. The current approach requires a one-time manual login.

DoorDash requires a browser session. On first use:

1. Run bun run login — opens a headed Chromium browser
2. Log into DoorDash manually (Google, email+OTP, etc.)
3. Close the browser — session is saved to ~/.doordash-mcp/profile/

After the initial login, the MCP server runs headless. The session persists across tool calls within the same server process. If the session expires or the server restarts, you may need to run bun run login again.

The doordash_login / doordash_verify tools attempt automated re-authentication via email + OTP, but this depends on having a valid Cloudflare session from a prior headed login.

Architecture

src/
├── server.ts                    # MCP entrypoint (stdio transport)
└── services/doordash/
    ├── index.ts                 # 21 tool definitions
    ├── browser.ts               # Patchright browser manager + in-page GraphQL
    ├── login.ts                 # Headed login script
    └── queries/                 # GraphQL queries captured from real sessions
        ├── storepageFeed.graphql
        ├── addCartItem.graphql
        ├── createOrderFromCart.graphql
        ├── convenienceSearchQuery.graphql
        └── ... (19 total)

Key design decisions:

• In-page fetch: All API calls run inside the browser via page.evaluate(fetch(...)) to inherit the correct TLS fingerprint
• Persistent profile: Chromium profile at ~/.doordash-mcp/profile/ preserves cookies and session across restarts
• Captured queries: GraphQL queries are stored as files, captured from real browser sessions by intercepting network requests
• Schema discovery: DoorDash has introspection disabled — schemas were discovered by sending invalid queries and reading error messages

Store types

DoorDash has two types of storefronts with different APIs:

	Restaurants	Convenience (grocery, alcohol, pharmacy)
Menu	storepageFeed (full menu upfront)	convenienceSearchQuery (search-based)
Tool	doordash_menu	doordash_convenience_search
Add to cart	By item name	By item ID

The doordash_menu tool auto-detects convenience stores and directs agents to use doordash_convenience_search.

Known limitations

• Cloudflare session: CF clearance may not survive MCP server restarts. A headed login (bun run login) re-earns it.
• VCC cards: Virtual credit cards are blocked by DoorDash's fraud detection. PayPal works.
• updateCartItemV2: DoorDash's quantity update mutation is broken server-side. The tool works around it via remove + re-add.
• Scheduled orders: Only ASAP delivery is supported. Scheduled time slot selection is not yet implemented.

License

MIT