Vendor-published
MyPlate.food nutrition tools MCP server
USDA nutrition calculators + the preserved MyPlate Kitchen recipes; source-cited, machine-verified.
Identity and maintenance
| Registry name | food.myplate/nutrition |
|---|---|
| Publisher domain | myplate.food |
| Maintainer type | Vendor-published namespace food.myplate -> myplate.food; host mcp.myplate.food is within myplate.food |
| Latest version seen | 1.0.0 |
| Last checked | |
| Last changed | Separate from “last checked”: we check far more often than anything changes. |
Enterprise evaluation
Every row below exists whether or not we found an answer. Expand any row to see the exact source and the date. Unknown means undocumented, never unsupported.
| Access and authentication | |
|---|---|
| Authentication required Whether the hosted endpoint accepted a connection with no credentials when we checked. | No We checked checkedPOST initialize without credentials -> HTTP 200; the server responded and did not require credentials Unauthenticated connection attempt — https://mcp.myplate.food/mcp |
| OAuth 2.1 authorization Whether the server publishes OAuth discovery metadata a client can follow automatically. | Not documented We checked checkedno OAuth discovery document at either well-known location OAuth discovery metadata — https://mcp.myplate.food/mcp |
| Dynamic client registration Without it, an IdP administrator must register a client by hand before anyone can connect. | Could not reach source We checked checkedno authorization-server metadata document found Authorization server metadata — https://mcp.myplate.food/mcp |
| Documented scopes | Not checked |
| Read and write are separate scopes A single opaque scope means read-only access cannot be granted: approving access approves everything. | Not checked |
| Deployment and transport | |
| Streamable HTTP transport | Yes Registry checked"type": "streamable-http", "url": "https://mcp.myplate.food/mcp" |
| SSE transport | Yes Registry checked"type": "sse", "url": "https://mcp.myplate.food/sse" |
| Vendor-hosted endpoint Data leaves your network. Where it goes is a question for the vendor's documentation. | Yes Registry checked2 remote endpoint(s) declared |
| Self-hostable package A published npm, PyPI, container or bundle artifact you can run inside your own perimeter. | No Registry checkedno installable package declared |
| Supply chain | |
| Public source repository | No Registry checkedno repository declared in the registry record |
| Open-source license | Not checked |
| Repository actively maintained | Not checked |
| Package deprecated | Not checked |
| Secret inputs marked as secret Credential-shaped inputs the publisher did not flag as secret may be logged by a client. | Not checked |
| Documented controls | |
| Audit logging documented | Not documented |
| Access controls documented | Not documented |
| Data residency documented | Not documented |
| Data retention documented | Not documented |
What remains unknown
12 of 18 criteria are undocumented. These are the questions to put to the vendor — not conclusions about the product.
- OAuth 2.1 authorization — no OAuth discovery document at either well-known location
- Dynamic client registration — no authorization-server metadata document found
- Documented scopes — no source found
- Read and write are separate scopes — no source found
- Open-source license — no source found
- Repository actively maintained — no source found
- Package deprecated — no source found
- Secret inputs marked as secret — no source found
- Audit logging documented — no source found
- Access controls documented — no source found
- Data residency documented — no source found
- Data retention documented — no source found
How we checked
One unauthenticated initialize request, plus the two OAuth discovery documents. Nothing was installed or executed. The exact request headers are below so you can reproduce the result — endpoint behaviour can depend on them.
POST https://mcp.myplate.food/mcp user-agent: mcpcompare.ai/1.0 (+https://mcpcompare.ai/methodology/probe; probe@mcpcompare.ai) content-type: application/json accept: application/json, text/event-stream mcp-protocol-version: 2025-06-18 -> HTTP 200 (open) checked 2026-09-19T17:17:19.038Z
Questions people ask
- Does the MyPlate.food nutrition tools MCP server require authentication?
- No. It accepted a connection with no credentials when we checked on 2026-09-19.
- Can I grant read-only access to the MyPlate.food nutrition tools MCP server?
- Not documented. We found no scope list to read.
- Can the MyPlate.food nutrition tools MCP server be self-hosted?
- Not from the registry record. No installable package is declared, so the vendor-hosted endpoint is the only documented option.