
Connect an assistant
Last updated October 11, 2026
Nakiri is a household's shared kitchen: what's in the fridge, freezer and pantry, the shopping list, and saved recipes. An assistant such as Muse, Claude or ChatGPT can read it and, if the person allows, keep it up to date, through Nakiri's MCP server.
The server
| Address | https://nakiri.app/mcp |
|---|---|
| Protocol | Model Context Protocol, Streamable HTTP. Each POST is one JSON-RPC message or a batch, answered as JSON; nothing is streamed and no session is kept. Versions 2025-11-25, 2025-06-18, 2025-03-26 and 2024-11-05. |
| Who can use it | Anyone with a Nakiri account, free to make at nakiri.app. A connection reaches only that person's own household. |
Signing in (OAuth)
The usual way. Nakiri follows the MCP authorization spec: OAuth 2.1, authorization code with PKCE (S256), for public clients.
- A request without a valid token gets
401withWWW-Authenticate: Bearer resource_metadata="…", pointing to/.well-known/oauth-protected-resource/mcp. - Authorization server metadata:
https://nakiri.app/.well-known/oauth-authorization-server. - Clients register themselves (RFC 7591) at
/oauth/register. No client secret is issued:token_endpoint_auth_methodisnone. Redirect URIs must be https, http to localhost, or an app's own scheme. - The person signs in to Nakiri and chooses whether the assistant may make changes.
Scopes:
read, andwritefor changes. - Access tokens last an hour. Refresh tokens last 90 days, are rotated, and each can
be used once. Tokens can be revoked at
/oauth/revoke.
Keys
For a client that can't sign in: the person makes a key in Nakiri under
Settings → Connect an assistant, read-only or read-and-change, and the
client sends it as Authorization: Bearer nakiri_…. It's shown once, and can
be revoked there at any time.
Tools
| Tool | What it does |
|---|---|
get_kitchen | What's in the kitchen, by place, with amounts, and the foods to avoid. Reads. |
get_shopping_list | The shopping list. Reads. |
get_recipes | Saved recipes, each checked against the kitchen. Reads. |
add_to_shopping_list | Put things on the list. |
remove_from_shopping_list | Take things off the list. |
update_kitchen | Groceries bought, food used or finished, a new count or level. |
move_food | Something moved: frozen, thawed, put away. |
save_recipe | Keep a recipe in the cookbook. |
edit_recipe | Change a saved recipe. |
delete_recipe | Remove a recipe (it can be put back for 30 days). |
add_foods_to_avoid | Add an allergy or a food never to put in a recipe. |
made_recipe | Take what cooking a saved recipe used out of the kitchen. |
A read-only connection sees only the three that read. Every change an assistant makes is listed for the household under Settings.
Limits
- 60 calls a minute per connection; past it,
429withRetry-After. - Messages up to 200 KB.
- Up to 10 assistants per person, keys and sign-ins together.
- The tools never call an AI model, so they use none of the person's daily AI allowance.
Data
What passes through a connection is used only to answer it and make the changes it asks for: never sold, never shared, never used to train AI models. See the privacy policy and terms.
Questions
Write to support@nakiri.app.