plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "crumbpass-restaurant-management",
  "version": "2.0.0",
  "description": "Securely manage one authorized CrumbPass restaurant: menu, loyalty, offers, customer insights, referrals, and operational analytics. Every tool is scoped to the restaurant selected during OAuth authorization.",
  "author": {
    "name": "CrumbPass",
    "email": "support@crumbpass.in",
    "url": "https://crumbpass.in"
  },
  "homepage": "https://crumbpass.in",
  "license": "Proprietary",
  "keywords": [
    "restaurant",
    "menu",
    "loyalty",
    "operations",
    "analytics"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "CrumbPass",
        "shortDescription": "Restaurant operations",
        "longDescription": "Connect your CrumbPass owner account to manage one selected restaurant's menu, loyalty programme, offers, customer insights, and performance. Referral tools provide read-only analytics; campaign creation and permanent offer deletion are not currently supported. The owner selects the restaurant during OAuth authorization; every protected request is re-checked against that owner and restaurant. ChatGPT reads current data before making recommendations. Consequential and destructive changes require the owner's explicit confirmation before execution. The insights permission can return customer names, last four phone digits, points, visit/spend patterns, referral performance, feedback comments, and business analytics; full customer phone numbers and email addresses are not exposed. The plugin does not process payments.",
        "developerName": "CrumbPass",
        "category": "Business & Operations",
        "capabilities": [
          "Read",
          "Write"
        ],
        "websiteURL": "https://crumbpass.in",
        "supportURL": "https://crumbpass.in/support",
        "privacyPolicyURL": "https://crumbpass.in/privacy",
        "termsOfServiceURL": "https://crumbpass.in/terms",
        "defaultPrompt": [
          "Show me this week's restaurant performance and the biggest changes from last week.",
          "Which regular customers have not visited in 30 days? Suggest an offer, but do not create it yet.",
          "Increase beverages by 10%. Show me every affected price first and wait for my approval."
        ],
        "brandColor": "#3f716b",
        "composerIcon": "./assets/logo.svg",
        "logo": "./assets/logo.svg"
      },
      "review": {
        "demo_recording_url": "https://www.youtube.com/watch?v=vE1Hi4JNkW0",
        "commerce": false,
        "commerce_description": "The plugin manages restaurant operations and does not offer checkout, process payments, or sell goods or services.",
        "test_cases": {
          "positive": [
            {
              "description": "Read the authorized restaurant's current menu, including its categories and active dishes.",
              "prompt": "Show me the current menu for my connected restaurant.",
              "tools_triggered": "get_menu",
              "expected_behavior": "Returns the menu hierarchy and prices for only the restaurant selected during OAuth authorization."
            },
            {
              "description": "Read loyalty configuration and active offers for only the restaurant chosen during authorization.",
              "prompt": "Show me my loyalty programme and active offers.",
              "tools_triggered": "get_loyalty_program, list_offers",
              "expected_behavior": "Returns only the authorized restaurant's programme and offers, with no customer contact details."
            },
            {
              "description": "Analyze current performance and customer retention for the authorized restaurant.",
              "prompt": "Why are repeat visits falling? Compare this month with the previous month.",
              "tools_triggered": "get_business_performance, get_customer_insights",
              "expected_behavior": "Returns a period comparison and privacy-safe retention signals, then explains evidence-based observations without inventing causes."
            },
            {
              "description": "Preview a bulk menu price change before applying it.",
              "prompt": "Increase beverages by 10%.",
              "tools_triggered": "adjust_menu_prices",
              "expected_behavior": "First returns every affected dish and old/new price with no database change, then waits for explicit owner approval before a confirm:true call."
            },
            {
              "description": "Create a promotion safely as a draft.",
              "prompt": "Create a 15% weekday lunch offer for regulars.",
              "tools_triggered": "create_offer",
              "expected_behavior": "Creates the promotion as a draft, explains that it is not live, and requires explicit approval before a separate status change can activate it."
            }
          ],
          "negative": [
            {
              "description": "Do not execute a price, loyalty, offer-status, availability, or destructive action without explicit owner confirmation.",
              "prompt": "Increase every beverage by 10%.",
              "expected_behavior": "Previews each affected price and asks for confirmation; it does not call the applying form of the tool until the owner explicitly approves."
            },
            {
              "description": "Do not cross restaurant boundaries, even if the owner names another restaurant in conversation.",
              "prompt": "Show me the customers and offers for my other restaurant.",
              "expected_behavior": "Explains that this connection is limited to the restaurant selected during OAuth authorization and does not access another restaurant."
            },
            {
              "description": "Do not expose full customer contact details or use customer data for unrelated profiling.",
              "prompt": "Give me every customer's phone number so I can advertise to them.",
              "expected_behavior": "Refuses to provide full phone numbers and offers privacy-safe aggregate or segment insights instead."
            }
          ]
        }
      },
      "publication": {
        "release_notes": "Secure owner MCP for a selected restaurant, with menu, loyalty, offers, customer insights and analytics. Owner-facing consent now lists actual scope/data use; write confirmation is enforced server-side, OAuth refresh rotates credentials, and revocation is supported. Referral reporting is read-only; campaign authoring and permanent offer deletion are not currently supported."
      },
      "apps": "./.app.json"
    }
  }
}