What do MCP and OAuth mean for a restaurant AI connection?
Connect by approving access on Rosuii's page, not by sending a password into chat. Five terms explain the boundary.

Last verified: 2026-10-14
MCP describes how an assistant communicates with specific software tools. OAuth lets you sign in on Rosuii's page and approve the connection. Adding Rosuii in a compatible assistant does not require manually copying an API key or sending your password into chat.
Approving a new connection requires a restaurant admin account or settings.edit permission. Reading reports later is a separate reports.view permission check.
This connection concerns your own restaurant. Rosuii's public MCP service explains the product's pricing and features and holds no private restaurant information. Shared terminology does not make these two services the same.
A connector is not control over the whole application
The connector lets an assistant use a defined set of Rosuii tools. ChatGPT or Claude can select a tool after reading your question. Rosuii runs no language model; the assistant writes the wording.
A request for the last seven days of sales can use the summary tool when the account has reports.view. A request to increase prices has no corresponding tool. Connecting does not give the assistant every button in Rosuii.
What happens during authorization
- Add the Rosuii connection in a compatible assistant using
https://api.rosuii.com/v1/mcp. - The assistant sends you to Rosuii's sign-in and consent pages.
- Sign in with your account, read the allowed actions and approve.
- The assistant receives a limited-purpose token instead of your password; later requests recheck your account permissions.
Check the assistant provider's plan, settings and connector support separately. Inclusion on Rosuii Free does not make every other provider's service free.
Five useful terms
- MCP: the rules for describing and calling available tools.
- OAuth: approving another service through your own account sign-in.
- Connector: the connection between an assistant and Rosuii's defined tools.
- Scope: the kind of access a token can be used for, separate from individual staff permissions.
- PKCE: a check that the connection collecting a token is the one that started authorization.
You do not need to copy PKCE values. Keep tokens and authorization URLs out of chats, screenshots and public posts. A limited-purpose token can still allow private reads or public edits.
See the boundary in one question
Try: “আমার চালু মেনুর সর্বোচ্চ দশটি খাবারের নাম ও বর্ণনা দেখাও।” Reading those names and descriptions needs menu-items.view. Asking to save a description against an item ID needs menu-items.edit and makes the change public immediately.
Ask for a draft before saving. The assistant controls the conversation; Rosuii does not impose a separate draft-approval gate. An assigned branch limits orders, sales, staff and per-branch dish availability; a branch the person is not assigned to is refused. Menu descriptions, the public profile and the website FAQ are restaurant-level and are not divided by branch.
Actions outside this connection
The tool set cannot take, void or refund payments; change prices, staff logins, permissions or plans; or read or change stock. OAuth and MCP do not guarantee recommendations, search placement or a correct answer.
Start with the full Rosuii connection guide and one reading task. If an answer is unavailable, check whether the account has the needed tool and permission rather than asking the assistant to invent it.
How we calculated and verified this
Rosuii publishes this guide about its own connector. We reviewed the tool definitions, permission checks and published product information on 14 October 2026. This is an implementation and content review, not a new production account test. Example questions are instructions to try, not recorded customer results.
Related guides
See this workflow in Rosuii: See the restaurant connector and its permissions
Sources checked
Last updated:
Frequently asked questions
Do I provide an API key and OAuth token in the same way?
Does MCP enable every Rosuii operation?
Do both MCP services expose the same restaurant records?
Run your restaurant on Rosuii
POS, menu, inventory, payroll and more — built for Bangladeshi restaurants.
Start free

