orderfood: Instructions file for Claude Code

CLAUDE.md

orderfood CLAUDE.md is an instructions file for Claude Code from henkas/orderfood. It costs 948 tokens per session, scanned A, original, MIT.

A set of coding instructions for an MCP server that lets agents place food-delivery orders through Uber Eats and Thuisbezorgd APIs. An API is a defined way for software systems to communicate; these APIs were reverse-engineered for interoperability research and personal use.

In plain words
What is it for?
It helps agents install dependencies, build, test, and type-check the project, and parse captured Uber Eats or Thuisbezorgd traffic into API reference documents.
Why use it?
It gives the project consistent commands, package-level workflows, and API-capture steps while the platform integrations are still being developed.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md. Also seen: mentions CLAUDE.md; mentions Claude Code.

This is henkas/orderfood's own configuration. It tells Claude Code how to work on orderfood itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything orderfood configures →

Reuse

Borrowing it

Nothing to install: this file belongs to henkas/orderfood. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/henkas/orderfood/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/henkas/orderfood

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for orderfood CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/henkas/orderfood/claude-md/github.svg)](https://agentmods.dev/instructions/henkas/orderfood/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/henkas/orderfood/claude-md"><img src="https://agentmods.dev/badge/instructions/henkas/orderfood/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for orderfood CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/henkas/orderfood/claude-md"><img src="https://agentmods.dev/badge/instructions/henkas/orderfood/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 948 This file is loaded in full into every session.
When invoked 948 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00948 $0.00948
Opus 5.5 $0.00379 $0.00379
Sonnet 5.5 $0.00190 $0.00190
Haiku 4.5 $0.00095 $0.00095

Measured 2mo ago against content hash d49f9fc45417, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

orderfood CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 80 lines

How it starts

The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

Project

MCP server that lets AI agents place food delivery orders on Uber Eats and Thuisbezorgd via reverse-engineered APIs. Legal basis: EU Directive 2009/24/EC Article 6 (interoperability reverse engineering). Personal use + open-source research, not commercial.

Status: Foundation phase (Plan 1) — platform API discovery in progress. Platform clients and MCP server come in Plan 2 after mitmproxy capture is complete.

Spec: docs/superpowers/specs/2026-03-22-orderfood-mcp-design.md Plans: docs/superpowers/plans/

Commands

pnpm install          # install all workspace packages
pnpm build            # compile all packages (tsc)
pnpm test             # run all tests across workspace
pnpm typecheck        # type-check without emitting

# Per-package (from repo root)
pnpm --filter @orderfood/shared test
pnpm --filter @orderfood/shared build

# API capture (after mitmproxy capture run)
cd tools/api-capture
pnpm parse:ubereats        # → docs/api-reference/ubereats.md
pnpm parse:thuisbezorgd    # → docs/api-reference/thuisbezorgd.md

# Run a single test file
pnpm --filter @orderfood/shared exec vitest run tests/errors.test.ts

Architecture

pnpm workspace monorepo. TypeScript 5, strict mode, pure ESM ("type": "module"), NodeNext module resolution. All packages extend tsconfig.base.json.

packages/shared            — @orderfood/shared: normalized cross-platform types + errors
packages/ubereats-client   — @orderfood/ubereats-client: UE REST client (Plan 2)
packages/thuisbezorgd-client — @orderfood/thuisbezorgd-client: TB REST client (Plan 2)
packages/mcp-server        — @orderfood/mcp-server: MCP server with 11 tools (Plan 2)
tools/api-capture          — mitmproxy addon (Python) + JSON parser (TypeScript)
docs/api-reference/        — auto-generated endpoint docs from mitmproxy capture

Key design decisions

Read the full file on GitHub · 80 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 80 lines · 948 tokens per session scan A d49f9fc45417

Subscribe to this mod's changes

orderfood CLAUDE.md is an instructions file published in the GitHub repository henkas/orderfood (4 stars, last pushed 4mo ago), licensed MIT. It adds 948 tokens to every session, about $0.0038 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

orderfood CLAUDE.md compared with instructions from other repositories

orderfood CLAUDE.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
orderfood CLAUDE.mdhenkas/orderfoodInstructions file44mo agoMITA948Claude Code
vibetags com-example-service-PricingService.instructions.mdPIsberg/vibetagsInstructions file25yesterdayMITA296GitHub Copilot
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot