README

From the reviewed commit d482a12 ↗; it updates when the author re-pins.

Hermes Plugin: eatwise

Portable Agent Plugins v1 package bundling the eatwise-mcp MCP server — the local-first engine behind Eatwise (外卖营养教练), a Chinese dietary coach: deterministic meal nutrition reviews, personal daily targets, and consented on-device profile/meal history. Same engine family as the WorkBuddy expert 外卖营养教练 (chichulaide monorepo, ai_backend/); the engine repo is a byte-for-byte extract (only the version line moved 0.1.1 → 0.2.0).

mcp.json launches the server via npx -y --allow-git=all --package git+https://github.com/harrylabsj/eatwise-mcp#cbc08f64609f64ee453ca21cca427a7eaeaa3158 eatwise-mcp — pinned to an immutable commit; the pin is the only update path. Needs Node.js ≥ 22.5 on PATH (uses built-in node:sqlite; zero npm dependencies).
--allow-git=all is required because npm 12 disables git-type fetching by default (allow-git defaults to none); on npm ≤ 11 the flag is a harmless no-op warning.
All data is confined to the plugin data directory via CHICHULAIDE_LOCAL_HISTORY_PATH=${PLUGIN_DATA}/history.sqlite3.
Server key ew keeps tool line names short: mcp__agent_plugin_eatwise_<hash8>__ew__configure_local_storage is 63 chars — inside the host's 64-character limit.

Privacy summary

Local-first by construction: no network calls, no accounts, no analytics, no payments. Profile and meal data are written only after explicit user consent (configure_local_storage); the profile schema rejects name/phone/city/ID/medical fields. export_local_data and delete_local_data are user-initiated tools. Meals are retained 180 days by default (user-adjustable). See the engine's PRIVACY.md.

More by harrylabsj

All 7 plugins by harrylabsj →

freight-reconciliation❖ Community★ 0

Payer-side freight reconciliation: import carrier bills and trip ledgers into a deterministic local core (SQLite, WAL, no cloud), re-calculate against contracted rates and produce evidence-linked difference lists for human review — 14 MCP tools over uvx stdio (engine pinned to the immutable commit e8cd259c, release v0.4.1), with 3 bilingual workflow skills bundled. Portable Agent Plugins v1 package (mcp.json + skills/); needs uv on PATH. Never approves payments, sends messages or writes back to ERP/TMS; final confirmations route through a local admin page the model cannot reach. Disclosure — the optional freight-admin page listens on 127.0.0.1 and is where a human confirms mappings, rules, matches and exports; nothing leaves the machine.

Tools

good-student❖ Community★ 0

Wrong-question diagnosis and study-action loop for parents and students — deterministic local core (SQLite, no cloud), host-model recognition gated by parent confirmation. Portable Agent Plugins v1 package (mcp.json + skills/); good-student MCP server pinned to immutable commit 2469cbb over uvx, with the good-student workflow skill bundled. Needs Python 3.10+ via uv. No credentials required; all data stays on-device and nothing is uploaded.

Tools

healthcare❖ Community★ 0

Local-first personal health records: encrypted on-device Vault (AES-GCM) for vitals, medications, activities, emotions, sleep, encounters, diagnosis mentions, medication plans and reminders, served through a Keychain-paired local daemon with 24 scoped MCP tools. Zero-config first run: the plugin bootstraps Vault + daemon + agent pairing automatically under PLUGIN_DATA. Engine pinned to an immutable PyPI release (healthcare-mcp==0.2.1) over uvx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), macOS only, Python 3.11+. Zero network by default; the optional LLM report-import endpoint stays off unless the user configures it. Approval-gated deletes, tamper-evident audit chain. Disclosure — personal health record-keeping, not medical advice (the skill forbids diagnoses and dosage changes); first run has uvx fetch healthcare-mcp==0.2.1 from PyPI; the optional report-import path posts report images to Alibaba DashScope (qwen-vl-max) unless HEALTHCARE_LLM_ENDPOINT points elsewhere, and only when HEALTHCARE_LLM_API_KEY is set.

Tools

kiwi❖ Community★ 0

Source suppliers and negotiate purchases through the Kiwi Buyer MCP server — an open-source A2A commerce runtime (pinned @harrylabsj/kiwi@0.12.5 over npx stdio), with the kiwi-buyer sourcing workflow skill bundled. Sourcing is dual-source: Kiwi Network results come from kiwi_search, and internet e-commerce listings are reported through the host's own web tools when the session has them (a host capability, not a plugin guarantee). Portable Agent Plugins v1 package (mcp.json + skills/); needs Node.js/npm on PATH. No credentials required; Kiwi never handles payments.

Tools

reading-buddy❖ Community★ 0

Local-first WeRead (微信读书) reading companion: syncs bookshelf, reading stats and notes to the local machine and turns them into private reading cards and weekly/monthly reviews through 8 MCP tools, with a built-in fictional demo mode for previews. Engine pinned to an immutable git commit (e5f6673) over npx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs Node.js 20+ on PATH. All data stays in PLUGIN_DATA; never posts to WeRead — cards and reviews are local files saved only after user confirmation. Disclosure — live mode sends your WEREAD_API_KEY as a Bearer token plus book ids and paging cursors to i.weread.qq.com (Tencent's WeRead agent gateway) and nothing else; the engine's MCP tool descriptions and error messages are Chinese-only while the skills are English-first; the engine's npm dependencies resolve as caret ranges at first launch.

Tools

wechat-social-assistant❖ Community★ 0

Local-first WeChat relationship memory assistant for macOS: captures only what is visible in the WeChat window via system OCR/Accessibility, stores everything in a local SQLite database (0600/0700 permissions, no cloud), and serves contact briefs, follow-up planning, outreach drafts and weekly relationship reports through 32 MCP tools. Engine pinned to the immutable PyPI release wechat-social-assistant==1.5.1 over uvx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs uv on PATH. All data confined to PLUGIN_DATA via WSA_ALLOWED_ROOT + path enforcement. Never reads WeChat databases, never injects into WeChat, never sends messages — outreach is drafts for human review only. Disclosure — reads WeChat only by screenshotting/OCR-ing and walking the macOS Accessibility tree of the frontmost window (not WeChat's databases or a bot API), compiles bundled Swift helpers with swiftc into ~/Library/Caches/wechat-social-assistant/bin on first use, and needs Screen Recording (optionally Accessibility) permission for the host terminal; no network egress, never sends messages.

Tools

← Back to the catalog · catalog built Oct 14, 2026