New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

weneed-mcp

Package Overview
Dependencies
Maintainers
1
Versions
16
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

weneed-mcp

MCP server for WeNeed (Coop Switzerland) shopping lists

latest
Source
npmnpm
Version
0.3.2
Version published
Maintainers
1
Created
Source

weneed-mcp

Manage your WeNeed (Coop Switzerland) shopping lists with Claude. Add items, check them off, search the Coop catalog, and more.

Important This is not an official MCP server and is not affiliated with Coop or WeNeed in any way. It uses a reverse-engineered Firebase backend and may stop working at any time if Coop changes their infrastructure. Use at your own risk.

What you can do

Once installed, just talk to Claude naturally:

  • "What's on my shopping list?"
  • "Add milk and eggs to my list"
  • "Check off the bananas"
  • "Search the catalog for gluten-free pasta"
  • "Remove the yogurt from my list"

Note: If you use shared lists, actions taken through this server will be visible to all participants.

Install

You need a WeNeed account (email/password) to use this.

  • Download weneed-mcp.mcpb

  • Install it:

    macOS - Double-click the file, or drag and drop it onto the Claude Desktop app icon

    Windows - In Claude Desktop, go to File > Settings > Extensions > Advanced Settings > Install Extension and select the file

  • Enter your WeNeed email and password when prompted. Your credentials are stored securely in your OS keychain.

That's it. You're ready to go.

Advanced setup

These methods require Node.js 18+ installed on your machine.

Claude Code

claude mcp add weneed -e WENEED_EMAIL=your-email@example.com \
  -e WENEED_PASSWORD=your-password -- npx -y weneed-mcp

Claude Desktop (manual) / Cursor

Add the following to your config file:

  • Claude Desktop - claude_desktop_config.json
  • Cursor - .cursor/mcp.json (project) or ~/.cursor/mcp.json (global)
{
  "mcpServers": {
    "weneed": {
      "command": "npx",
      "args": ["-y", "weneed-mcp"],
      "env": {
        "WENEED_EMAIL": "your-email@example.com",
        "WENEED_PASSWORD": "your-password"
      }
    }
  }
}

Test connection

Verify your credentials work before wiring it into a client:

WENEED_EMAIL='your-email@example.com' WENEED_PASSWORD='your-password' npx weneed-mcp

Available tools

ToolDescription
get_shopping_listsGet all shopping lists you have access to, including shared lists
get_list_itemsGet all active items in a specific shopping list
add_itemAdd a product to a shopping list by name
check_itemMark an item as checked/bought
uncheck_itemUncheck a previously checked item
remove_itemRemove (deactivate) an item from a list
search_catalogSearch the Coop product catalog
get_categoriesGet product categories from the Coop catalog

How it works

WeNeed is a Progressive Web App backed by Firebase (Firestore + Cloud Functions). This MCP server authenticates with your credentials using the Firebase JS SDK, then reads/writes directly to the same Firestore collections and calls the same Cloud Functions that the official app uses.

Your credentials are only sent to Firebase/Google's authentication servers. They are never stored or transmitted anywhere else.

Development

git clone https://github.com/lewpgs/weneed-mcp.git
cd weneed-mcp
npm install
npm run build
node dist/index.js

Debug with the MCP Inspector:

WENEED_EMAIL='your-email@example.com' WENEED_PASSWORD='your-password' \
  npx -y @modelcontextprotocol/inspector npx weneed-mcp

Disclaimers

  • Unofficial - This project is not affiliated with, endorsed by, or connected to Coop or WeNeed in any way.
  • Reverse-engineered API - This server interacts with WeNeed's Firebase backend, which is not a public API. Changes to Coop's Firebase project, Firestore security rules, or Cloud Functions could break this server without notice.
  • Credentials - Your email and password are only used to authenticate with Firebase/Google. They are never stored or sent anywhere else.
  • Shared lists - If you use shared shopping lists, actions taken through this MCP server (adding, checking, removing items) will be visible to all participants.
  • Use at your own risk - No guarantees of functionality, availability, or compatibility.

License

MIT

Keywords

mcp

FAQs

Package last updated on 17 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts