Order by Cash App
Find local restaurants, compare menus and build a food cart from your AI agent. 5 tools, no sign-in, and no tool that sends money or reads a Cash App balance.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Order by Cash App via MCP
https://connect.squareup.com/v2/mcp/cash-appWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Order by Cash App Tools & Capabilities (5)
Given a restaurant brand name, return its locations. A name may match multiple brands (e.g. "pizza"); returns up to `limit` locations total. Optionally restrict results to within 5 miles of a location.
Discover restaurants near a given location. Returns a plain English list of restaurants with their names, locations, fulfillment hours, and descriptions.
Create a cart for a restaurant location using unit token and a list of item selections. Use standard/first variation if no variation is explicitly specified. Use CALI_ prefixed IDs for menu item, and CALIV_ prefixed IDs for menu item variations. Fill both menu item and menu item variations when they are available. Any item requiring a modifier requires a modifierId field (singular, using CALIM_ prefix from the menu's modifier data). If a modifier has minSelection >= 1, at least one modifier from that list must be included.
Get menu items for a restaurant location by brand name and address. Returns menu categories, items, prices, and a unit token for placing an order.
Research tool: get plain text menus for multiple restaurant locations. Returns up to 10 menus with item names, descriptions, and prices for comparison and analysis.
Read from the server on 2026-08-18, including each tool's own safety annotations.
Limits
- No payments, no balances, no account access. Nothing on this server sends money, reads a Cash App balance or lists transactions. If that is what you came for, this is the wrong connector.
- Select US locations only. Cash App's help centre states that Neighborhoods is currently available only in select locations. Restaurants appear only where participating Square sellers have joined.
- Pickup is what the server claims; delivery is unresolved. The server's
initializeresponse states its tools are for pickup orders only, yetcreate-cartaccepts aDELIVERYfulfilment type. We report both and reconcile neither. The fulfilment field defaults toPICKUP. - Checkout happens outside the conversation. Per Block's goose documentation the flow ends with a checkout link completed through Cash App. The connector cannot finish an order on its own.
- The catalogue is only Square sellers. This is not a general restaurant directory and not a delivery aggregator. A restaurant that does not use Square will not appear.
- Search radius is capped at 5 miles.
discover-nearby-restaurantsdefaults to 1 mile and rejects anything above 5.search-brand-by-nameapplies the same 5-mile bound when a location is given, and returns at most 100 locations. - Menu comparison is capped at 10 locations.
get-multiple-menusstates a maximum of 10. - No order management. There is no tool to check, amend, cancel or track an order after the cart. Only five tools exist, and none reads an existing order.
- The directory's tool list disagrees with the server in both directions. Anthropic's 2026-08-16 snapshot names seven tools; the live server returned five on 2026-08-18. The snapshot names three the server does not expose — get-restaurant-ordering-view, get-single-menu-view and app_create-cart, named here without backticks because they are not live tools — and omits
search-brand-by-name, which it does. Four names appear in both. The live handshake is authoritative. - The interactive ordering view is client-dependent. Anthropic's entry records
has_mcp_appas true and says an interactive ordering view opens in chat on clients that support it. No tool carried a_meta.uiblock in our handshake, and the server advertised no UI capability atinitialize, so we did not observe the widget. In clients without it, the connector degrades to text. - No published rate limits. Neither Block's goose page nor Anthropic's entry states a call ceiling, so we do not claim one.
- No MCP-specific privacy statement. The privacy policy Anthropic links is Square's general notice, which is written for sellers and does not mention MCP or this connector. Your location and any
customer_intentphrase go to Block's servers on every search. - We did not exercise any tool with real arguments. Our check was a read-only
tools/listhandshake plus one zero-argument call that returned a schema validation error rather than data. Every behavioural claim above comes from the server's own tool descriptions, Block's goose documentation or Cash App's help centre.
Frequently asked questions
Can the Cash App MCP server send money or check my balance?
No. Every one of the five tools read from the live server on 2026-08-18 concerns restaurants, menus or a food cart. None sends a payment, reads a balance, lists transactions or touches a Cash App account. Despite the brand name, this is a food-ordering connector, and no tool on it moves money in any direction.
Does create-cart charge my card or place a paid order?
No. It builds a cart and hands off. The tool's own schema describes creating a cart from item selections, and Block's goose documentation says the flow ends by giving you a checkout link to complete payment through Cash App. Payment happens on Cash App's own surface, outside the conversation, so the connector never takes money itself.
Why is the endpoint on connect.squareup.com and not a cash.app domain?
Because Block, Inc. owns both brands. Block's own site lists Square and Cash App among its businesses, and connect.squareup.com is Square's production API host. The connector fronts Square's seller network inside Cash App, so it is served from Square infrastructure. Anthropic's directory names Block, Inc. as the publisher.
Do you need a Cash App account to use this MCP server?
Not to browse. Our anonymous handshake on 2026-08-18 returned all five tool definitions with no credential, and Anthropic's directory records the server as authless. An account becomes relevant only at checkout, which happens on Cash App rather than through any tool, so searching and menu reading work without signing in.
Where does the Cash App ordering connector work?
In select United States locations only. Cash App's own help centre states that Neighborhoods, the ordering network behind this connector, is currently available only in select locations. Coverage depends on which Square sellers have joined near the address you give, so a search outside those areas returns nothing rather than an error.
Can this connector order delivery, or is it pickup only?
The sources disagree, so assume pickup. The server's own initialize instructions say the tools cover pickup orders only, while the create-cart schema accepts a DELIVERY fulfillment type that defaults to PICKUP. Cash App's help centre describes ordering for pick up through the app. Treat delivery as unconfirmed until the vendor reconciles the two.
Which Cash App tools are safe to let an agent call automatically?
The four annotated read-only: search-brand-by-name, discover-nearby-restaurants, get-single-menu and get-multiple-menus. All four only read restaurant and menu data. The fifth, create-cart, is annotated readOnlyHint false, meaning the server states it is not a read. Keep per-call approval on that one even though nothing is charged.
Sources
- Block's goose documentation, "Cash App Extension" (retrieved 2026-08-18, HTTP 200; clean Markdown at the
.mdsuffix). Setup steps for goose, example prompts, and the statement that the flow ends with a checkout link to complete payment through Cash App. This is the exact URL Anthropic's directory publishes. goose is the open-source agent Block created and contributed to the Agentic AI Foundation at the Linux Foundation, so this is first-party documentation from the connector's own publisher rather than a third-party host.goose-docs.ai/robots.txtisAllow: /for all agents, names GPTBot, Claude-Web, Anthropic-AI, Google-Extended, PerplexityBot, Bytespider and CCBot explicitly under a heading welcoming AI crawlers, and carries noContent-Signalline. · retrieved 2026-08-18 - Live
tools/listhandshake againsthttps://connect.squareup.com/v2/mcp/cash-app— 5 tools with descriptions, input schemas and safety annotations, returned anonymously (2026-08-18). Theinitializeresponse identified the server asblock-cash-app-ordering-mcp-serverversion 1.0.0 and carried the instructions line about pickup orders.resources/listreturned an empty array andprompts/listreturned method-not-found. Schemas committed atdocs/marketing/data/tool-schemas/cash-app.tools.json. · retrieved 2026-08-18 - Auth posture observed directly: a zero-argument
tools/callon the read-onlydiscover-nearby-restaurantsreturned a missing-required-field error rather than an authentication challenge (2026-08-18), and all four.well-known/oauth-protected-resource,oauth-authorization-serverandmcp/server-card.jsonprobes on the host returned 404. No credential was sent at any point and no tool was called with arguments. · retrieved 2026-08-18 - Anthropic Connectors Directory entry (from the 2026-08-16 directory snapshot; tier, categories, endpoint, publisher, authless posture,
has_mcp_app, and the seven-name tool list). The live page returns 403 to command-line clients. · retrieved 2026-08-16 - Cash App help centre, "Neighborhoods on Cash App" (retrieved 2026-08-18, HTTP 200 after a 307 to the US-localised path). States the network is currently available only in select locations, that it connects customers with participating Square Sellers, and that you place an order for pick up through the app. Content is client-rendered; the text above was read from the page's embedded payload.
cash.app/robots.txtisAllow: /with account paths disallowed, and carries noContent-Signalline. · retrieved 2026-08-18 - Square MCP server documentation (retrieved 2026-08-18, HTTP 200). Establishes that Square's own MCP server is a separate, OAuth-gated, seller-facing endpoint at
mcp.squareup.com/sse, recorded there as in beta. Corroborated by Block's goose "Square MCP Extension" page, which is a distinct page from the Cash App one. · retrieved 2026-08-18 - Block, Inc. (retrieved 2026-08-18, HTTP 200). Lists Square and Cash App among its businesses, alongside Afterpay, TIDAL, Bitkey and Proto. This is the publisher URL Anthropic's directory carries. · retrieved 2026-08-18
- Square privacy notice (retrieved 2026-08-18, HTTP 200 after redirect to the US-localised path). This is the policy Anthropic's directory links; it is Square's general seller-facing notice and does not mention MCP or this connector. · retrieved 2026-08-18
- Connector support contact published by Anthropic:
agentic-commerce-eng@squareup.com.
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Productivity
- Developer
- Order by Cash App
- Tools
- 5
- Domain
- connect.squareup.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.