← Search

McDonald's Buddy (McQuartet)
Food & Drink 📌 Pinned version: commit 133c39b
🔎 Install prompt analysis · 2026-10-19 : runs commands · installs packages · uses API keys or tokens
⚙ Needs: Before you start: read this whole install prompt…

McDonald's Buddy (McQuartet)

Four McDonald's China play modes in one buddy: your practice record and rank, a group meal commander, a hidden menu lab, and a daily fortune.

At a glance
What
Four McDonald's China play modes in one buddy: your practice record and rank, a group meal commander, a hidden menu lab, and a daily fortune.
Cost
Free
Needs
Before you start: read this whole install prompt, tell me in a few lines what this skill does and what installing it involves, and wait for my go-ahead before you do anything else.
Install
Copy the installer prompt below into your Muse — your agent does the rest.

Version:

@
Created by: @janetom645-coder
⌁

Install

Copy the install package below, then paste it into Muse📌 Pinned version: commit 133c39b
Wanna be extra careful?

The install prompt below already includes the vetting steps: your agent follows the community checklist before installing anything with executable code. Want more?

How to check a build before installing →

🧭 What this touches
  • It can run commands on your Muse’s computer.
  • It can download and install software packages.
  • It works with an API key or a token that you provide.
Install prompt analysis · 2026-10-19
🔒 Security and provenance
📌 Pinned version: commit 133c39b · 2026-10-19
🔎 Install prompt analysis · 2026-10-19 : runs commands · installs packages · uses API keys or tokens
What the scan found — excerpts from the install prompt
  • runs commands — git clone https://github.com/janetom645-coder/mcd-buddy.git · cd mcd-buddy · pip install -r requirements.txt
  • installs packages — git clone https://github.com/janetom645-coder/mcd-buddy.git · pip install -r requirements.txt · pip install -e .
  • uses API keys or tokens — export MCD_MCP_TOKEN="你的 Token" # Windows: set MCD_MCP_TOKEN=... · 本项目真实调用麦当劳中国官方 MCP 服务(`https://mcp.mcd.cn`,Streamable HTTP,Bearer Token 鉴权), · export MCD_MCP_TOKEN=your_token
Skill Harbor never reviews the code of a listed skill. These are dated facts about the install prompt and our install test, not a safety certification. Review a skill yourself before you install it. How we verify

Before you start: read this whole install prompt, tell me in a few lines what this skill does and what installing it involves, and wait for my go-ahead before you do anything else. Prerequisites: Account and token required before any real use: a McDonald's China MCP token. The listing is free, and activating the token is described upstream as free. Get the token yourself, in person, because it needs mobile phone number verification: go to https://open.mcd.cn/mcp , sign in with your mobile phone number, open the console at the top right, click Activate, agree to the service agreement, and copy the token. Then configure the McDonald's China MCP server: name mcd-mcp, type streamablehttp, URL https://mcp.mcd.cn , header Authorization: Bearer <your token>, or set the MCD_MCP_TOKEN environment variable where the skill reads it that way. Keep the token only in your own private client configuration or environment: never commit it, never share it, and never paste it into a shared chat. Upstream states a limit of 600 requests per minute per token (429 above that). This skill also needs Python 3.10 or later for its optional command line program: pip install -r requirements.txt installs its only runtime dependency (mcp>=1.9.0, the official MCP Python SDK), and pip install -e . installs the mcd-buddy command from src/mcd_buddy. The SKILL.md itself works through the mcd-mcp connector tools. The command line client reads the token from MCD_MCP_TOKEN (a --token option also exists; the environment variable is the safer path, because a command line argument can be seen by other local processes), and its server URL defaults to https://mcp.mcd.cn but can be overridden with the MCD_MCP_URL environment variable, so check that variable if the client ever points elsewhere. A --demo mode runs all four play modes offline on built in sample data, with no token and no calls. Install "McDonald's Buddy (McQuartet)" for me. It reads your McDonald's China account and menus through the official MCP and plays four read only modes with the results: practice record, group meal planning, hidden menu rebuilding, and a daily fortune. It never orders, draws or redeems. Repository: https://github.com/janetom645-coder/mcd-buddy (the skill is the whole repository at the pinned commit, SKILL.md at its root: 54 files, listed in the fingerprints below) Pinned version: install the code at commit 133c39b9b20ed4bce0d2df18d7682c09c5866019 exactly. Do not substitute a newer version. If this commit is unreachable, stop and tell me. 1. Clone https://github.com/janetom645-coder/mcd-buddy into a temporary folder, check out commit 133c39b9b20ed4bce0d2df18d7682c09c5866019, and and copy the whole repository folder from that checkout, excluding the .git folder. Then compare every file in the folder with the fingerprints recorded for this listing on 2026-10-18: [FINGERPRINTS] - .gitattributes: SHA-256 799df7e3580045490c652f407168de3e511e57610b1ea9ae775762d09e1731c7 - .github/workflows/ci.yml: SHA-256 343e29cc4f1908167eecea340015505e84ab2318c773ecf8eff6346fc1638b15 - .gitignore: SHA-256 77294b83732da9653346d2087d8d19a625f8071180a35f16e191ee5e989b7fc3 - CONTEST_DECLARATION.md: SHA-256 cd28101bcb29cc8fb24b372fe91ce6b42c4a1487a54e01f7ade0c8c6a84241b7 - LICENSE: SHA-256 9cbbafc054ead4dc42afb7d65ee50f76daf21ebc73c4c5146b997294b5632a0b - MCP_INTEGRATION.md: SHA-256 933b34d4a591cf9f0e0c154be8696a65dd3d878329619a88ff696ea7c0736ae5 - README.md: SHA-256 0f095d1e6ab3c766627b7dc90898cadfbc8e4211f20708e4afd2cfbaa39fe7b9 - SKILL.md: SHA-256 8092d57e5f190338cbcf78d3b18f015fad24fb1efee53c280c5845c43d016910 - assets/IMAGE_BRIEF.md: SHA-256 081d9c5dbb459b8a13977c8613b5946afeaea7184fce78580cf434366aa0c26b - assets/banner.svg: SHA-256 518dc70868b1bb6bafb2bee4a567510be12e44d693f023f3fe6e1469cf5d0ebf - assets/icon-fortune.svg: SHA-256 7ec4da5c65801552fda9c77c32febb4aae32c0572898a56b990a95ff454af443 - assets/icon-group-meal.svg: SHA-256 9e75301f0fc154b17107987390d60e1ec4f15692bf66811f60a4b2e5b2b394aa - assets/icon-hidden-menu.svg: SHA-256 d4075799aeb0bcab33fa85f89e21fff394d9268306460128b73aa85a86c5dc1e - assets/icon-practice.svg: SHA-256 9e3b77cdd242c94b10365074131ceccbeba62a76eb8b0eff4389702f40c4b044 - assets/mascot.svg: SHA-256 3722773f0befbb787845dba97536798510ed03b7626dfaf69171fb5d36fe3449 - examples/people.json: SHA-256 e51edcfeddde6b6e4eda1062a962c51ed88b0796f6791e2b32fee7eb53a76993 - examples/sample-outputs.md: SHA-256 c985daf39425ff5e2efea55917d5c9d503aa2082ea52cd33b97dc6f157325017 - mcp-config.example.json: SHA-256 7644e429708a6aa8ceb09505dcd0fc9a092b3608e974767360f4c158cb1047dd - promo/demo.gif: SHA-256 f402631c42aca0ad5b14cc9c861356a9d5871a56d2bcb469d551a4b70f203f4f - promo/make_overlays.py: SHA-256 1a8597479d93fee152af07d721216b87a23fabe285c3866c064bab7ec91ca946 - promo/make_promo.py: SHA-256 2729dca8dae86ce60fbe67af843ebb69d0acbbb8a3e655077d31b9652f7ff08b - promo/make_readme_gif.py: SHA-256 e34da2ef29ae637f04598c4890ba1eb0dd3d9cf11306766e25d55981f54e194f - promo/mcquartet-16x9.mp4: SHA-256 823449b66dd6bad5c8f790c452bab48f00c8d98e8280eb8b7968889ad68e8345 - promo/mcquartet-9x16.mp4: SHA-256 4cfd9862829166b0a9644d644a3e15c589279098c7ffa455146e2aa8e739caa7 - promo/overlay/shot-fortune.png: SHA-256 01ea3b9df9f90b85cb6a5ec881a42388251fb305520a2fc4c740ff9204a62bbf - promo/overlay/shot-group.png: SHA-256 c47fcaee337648607184081fbcc2c4ec383c41fdda3ea1cd1c7d5d04d422f147 - promo/overlay/shot-hidden.png: SHA-256 d377423ff567da92193dda51d7b3959572d957c004cd1cbc41f2a0efa8a5259a - promo/overlay/shot-practice.png: SHA-256 b0ce863f75d4a369337ad4f6d4ce30d7665c767ffb122c25178a2eec9abdfcfd - promo/剪映实操脚本.md: SHA-256 76efad981fa7fef9eaa4f95c0b243b158b4f13debda9d0dc1e4fff1c9955866c - promo/掘金长文.md: SHA-256 fd943ac41ecf127ca79d11293cc2ab898ad043990aa4a47b8925a140befdf941 - promo/推广文案.md: SHA-256 8d9e398509943fdf5b2d0b54bd2477b6acad4d874761fd52cd69213ba3031902 - pyproject.toml: SHA-256 1bd3d1c5412e1fb80d69f5bacd00c891311a27635ab309de3262e343f111c104 - requirements-dev.txt: SHA-256 412bdb9b3a741aac353e1d9f6c602e9430ec1cd55f2d147ca342cb03ed458d67 - requirements.txt: SHA-256 c036fd82b2fc37e8c5ba43038bed705c329410469e496aeb58caf0ba39294f29 - src/mcd_buddy/__init__.py: SHA-256 6793033c2933050aadd1d30a4dc02c9c0f2a1d0c010d3d954f5f71d027f2c15b - src/mcd_buddy/cli.py: SHA-256 0ecaed5ed8e5ad94acaae014b970fe1c4f6c07e2d5fd1a72d8064c292c5c289a - src/mcd_buddy/demo.py: SHA-256 fd64e80de99fbc23decccf374dfa8931b7c48f2911ccbbb46a30adb0c4811910 - src/mcd_buddy/mcd_api.py: SHA-256 40ccdce9aa12cfada4776b952b1ae3a9aa465c9fad994081f6a0ae78da8b4d71 - src/mcd_buddy/mcp_client.py: SHA-256 850b8e694d1585c3ec481bceb2af1260d36de22d0b94a3bf2c65e6eee9d6cba7 - src/mcd_buddy/modules/__init__.py: SHA-256 240fa5424be54bca3ee65b521e50442c52de224cb0cb126316372f9a6e4e5768 - src/mcd_buddy/modules/fortune.py: SHA-256 43aa691445739d0127ee4892b627dfdc125cf98fd66ab68abc8a80407ac2a614 - src/mcd_buddy/modules/group_meal.py: SHA-256 24050a5b490d09804de330f9c3b82c81d4f769c8d608e79b45d902f76d92d158 - src/mcd_buddy/modules/hidden_menu.py: SHA-256 a250873d56bbf6bcf37e8dc5f31bf7848090726356004a45a66454698417ec79 - src/mcd_buddy/modules/practice.py: SHA-256 a94c05baaad4fbb0134f7864200d343e8166ee9604ed4b99b7553eedae3a213d - src/mcd_buddy/theme.py: SHA-256 887984457c3e5449bf8e1d6ea0cbaab1b797275c8c35386faef214c280e04927 - src/mcd_buddy/utils.py: SHA-256 8eb89841183c55c729221fded28f2f6038c4f721d5ee40516d5f480c01a8e25e - tests/conftest.py: SHA-256 a08a7ee4a0255aa2cd97809a6968555770337d25ef401bf41879f376742a5158 - tests/test_cli.py: SHA-256 80659d2ce0279798a750573a2c67463da0e9178a7b8e127f89873fd4f787cb9b - tests/test_demo.py: SHA-256 57790ed2dcad18369791963620f6c81a3c385b5575d4e96a65e5cbbe54e0e8db - tests/test_mcd_api.py: SHA-256 a35fa5e315cb8e2bc9f9993dc6ffc74e36d85b3a466000d6c1d5cc4f290cc991 - tests/test_mcp_client.py: SHA-256 6d59806c7058db74b74133d4a8e0b0912e2f023b1b10e50d5185b3d0ff954b59 - tests/test_modules.py: SHA-256 fc7967a73c93f39445339677726c4a5da1e314db71e34af67be12f437b34d4e2 - tests/test_utils.py: SHA-256 bced09b4c0508317b143218e287dcd8bb237a990899106d7f28257765622095b - workbuddy.md: SHA-256 9ad92ec0a831ed7918e75a4492228d6dc1d61aca476cbd21e7be4c4f17b8c812 If a file does not match, it changed since the listing was prepared: do not install it yet, tell me what you found and let me decide. 2. Read SKILL.md in full (and every other file in the folder) and tell me in plain words: what the skill does when used, which services it connects to, whether it reads or sends any personal information or keys, and anything that seems unusual. Stop on any red flag and tell me before going further. Confirm these points from the files: - The repository holds SKILL.md, the Python package under src/mcd_buddy/ (cli.py, mcd_api.py, mcp_client.py, a large built in demo.py, theme.py, utils.py and the four play modules under modules/: practice.py, group_meal.py, hidden_menu.py, fortune.py), requirements.txt (mcp>=1.9.0 only), requirements-dev.txt (pytest and ruff, development only), pyproject.toml, tests/, examples/ (people.json with seven sample people and sample-outputs.md), assets/ (banner, mascot and mode icons), promo/ (upstream promotional videos, images and the scripts that generated them, using PIL and ffmpeg; not invoked by the SKILL.md), README.md, MCP_INTEGRATION.md, LICENSE and mcp-config.example.json. The SKILL.md drives the connector tools directly; the command line program is an optional second front end over the same read only tools. - At use time, data goes only to the McDonald's China MCP server at https://mcp.mcd.cn (Streamable HTTP, Authorization: Bearer token). Practice record calls now-time-info, order-list, query-my-account, query-my-coupons and query-my-prizes, so your order history, points balance, coupons and prizes are returned to your machine and turned into local statistics. Group meal calls query-nearby-stores with the city and keyword you give (both are required together), query-meals for the chosen store and calculate-price with product codes to price the merged plan; the names, budgets, wants and avoids you state for each person are used by the agent in the conversation to do the matching, and the tool calls themselves carry store and product codes, not the people's names. Hidden menu calls query-meal-detail and list-nutrition-foods and calculate-price with the full combo round list. Fortune calls now-time-info, list-nutrition-foods, campaign-calendar, query-lottery-info and query-my-prizes. The command line client retries transient failures (429 and gateway errors) with backoff, at most three attempts. - No write action exists in this skill: the SKILL.md states it only queries and price checks, and never calls create-order, draw-lottery or mall-create-order, never orders automatically, never draws and never redeems points; anything involving money or a points deduction is left for you to do in the official McDonald's app. A check of the package source finds no write tool name anywhere under src/. The group meal output is a plan with a price and a split, not a placed order. Nutrition figures are reference only and, per the SKILL.md, are not medical or nutrition advice. - Nothing is sent anywhere during installation itself; the only download at install time is the repository from GitHub at the pinned commit, plus the Python package install disclosed in the prerequisites if you choose to set up the command line program. The listing and the token are free, and demo mode needs no token and makes no calls at all. 3. When I say "yes, install", install it as a skill: copy the whole folder into the agent's skills directory, in a folder named "mcd-buddy", keeping every file (.gitattributes, .github/workflows/ci.yml, .gitignore, CONTEST_DECLARATION.md, LICENSE, MCP_INTEGRATION.md, README.md, SKILL.md, assets/IMAGE_BRIEF.md, assets/banner.svg, assets/icon-fortune.svg, assets/icon-group-meal.svg, assets/icon-hidden-menu.svg, assets/icon-practice.svg, assets/mascot.svg, examples/people.json, examples/sample-outputs.md, mcp-config.example.json, promo/demo.gif, promo/make_overlays.py, promo/make_promo.py, promo/make_readme_gif.py, promo/mcquartet-16x9.mp4, promo/mcquartet-9x16.mp4, promo/overlay/shot-fortune.png, promo/overlay/shot-group.png, promo/overlay/shot-hidden.png, promo/overlay/shot-practice.png, promo/剪映实操脚本.md, promo/掘金长文.md, promo/推广文案.md, pyproject.toml, requirements-dev.txt, requirements.txt, src/mcd_buddy/__init__.py, src/mcd_buddy/cli.py, src/mcd_buddy/demo.py, src/mcd_buddy/mcd_api.py, src/mcd_buddy/mcp_client.py, src/mcd_buddy/modules/__init__.py, src/mcd_buddy/modules/fortune.py, src/mcd_buddy/modules/group_meal.py, src/mcd_buddy/modules/hidden_menu.py, src/mcd_buddy/modules/practice.py, src/mcd_buddy/theme.py, src/mcd_buddy/utils.py, tests/conftest.py, tests/test_cli.py, tests/test_demo.py, tests/test_mcd_api.py, tests/test_mcp_client.py, tests/test_modules.py, tests/test_utils.py, workbuddy.md). 4. Verify with no network calls: frontmatter valid, files in place. 5. Report what was installed, where, and what I still need to do myself (for example: get the McDonald's China MCP token myself at https://open.mcd.cn/mcp with my mobile phone number if I do not have one, put it only in my own private MCP client configuration or environment variable and never paste it into a shared chat, install Python if it is missing, and set up the mcd-mcp connector to https://mcp.mcd.cn if it is not configured; using the skill is a separate step that only starts when I ask for it, and any order, coupon claim or booking happens only as disclosed above). GitHub is optional: if I have a GitHub account or the gh CLI, you may use it; otherwise public access is fine. Never require it unless it's in the prerequisites above. Rules: don't touch anything outside the temp folder and the install target. If anything looks off, stop and ask me.

?

Questions

How do I install a build?

Every product page includes a copy-paste install prompt. Paste it into your Muse and it sets the build up for you — no manual configuration.

Where does my money go?

Straight to the seller. Skill Harbor never processes payments: checkout happens on the seller’s own page, usually Stripe.

What does the ✓ next to a creator’s name mean?

It means we confirmed the identity of the person behind the listing. It says nothing about the code itself — always check a build before installing it.