Bring Fast

Multi-user grocery MCP + dashboard for the UAE.

Each person has a Bring Fast account and only their own supermarket logins. Grok connects with OAuth (Dynamic Client Registration) — users sign in with the same Bring Fast email/password. No Client ID / secret to paste.

Login

One form, one step. Email plus password signs you in, and on first use that same form creates the account — there is no separate registration page to find.

• The session cookie lasts 30 days (BRINGFAST_SESSION_DAYS), and is Secure when BRINGFAST_PUBLIC_URL is https.
• A wrong password keeps the email you typed, and ?next= brings you back to the page you were heading for.
• When Grok asks for access and you are already signed in, Bring Fast hands the code straight back with no extra screen. When you are not, the authorize page signs you in — or creates the account — and continues the same flow.
• Connectors get a refresh_token, so a running connector is never dropped back to a login screen.
• Authorization codes only go to a redirect_uri the client registered.

Store logins live on the dashboard. Bring Fast reuses a live supermarket session when it belongs to you, and signs in again when it does not, so a shared browser profile never mixes two people's carts. Use Check login on a store card to test the saved credentials.

Stores

• Carrefour UAE
• Grandiose
• Waitrose UAE
• Spinneys UAE

Run

python3 -m venv .venv
.venv/bin/pip install -e .
BRINGFAST_HOST=0.0.0.0 BRINGFAST_PORT=8877 \
  BRINGFAST_PUBLIC_URL=https://your-public-host \
  .venv/bin/python -m bring_fast.app

Official store checkout (Playwright) is optional:

.venv/bin/pip install -e ".[checkout]"
.venv/bin/playwright install chromium

• Dashboard: /
• MCP: /mcp
• Health: /health
• OAuth: /.well-known/oauth-authorization-server, /oauth/register, /oauth/authorize, /oauth/token

BRINGFAST_PUBLIC_URL is what the server tells clients to call back on. Leave it unset behind a reverse proxy or tunnel that sends X-Forwarded-Proto / X-Forwarded-Host and the public URL is taken from the request. Set it explicitly only to a public https origin. A server that advertises 127.0.0.1 gives the connector nothing reachable to authenticate against.

If Grok hangs on “Checking authentication…” or reports “Connection failed”, diagnose the live URL:

.venv/bin/python -m bring_fast.doctor https://your-public-host/mcp

The first FAIL line is the reason the connector never finishes.

Grok

Custom connector URL: https://<your-host>/mcp

Grok discovers OAuth and opens the Bring Fast login. Friends register their own Bring Fast account; they never see another user’s stores.

Official checkout stays on each supermarket site.

Tests

.venv/bin/pip install -e ".[dev]"
.venv/bin/python -m pytest

tests/test_mcp_handshake.py replays the OAuth and MCP handshake a client performs. Login, refresh tokens, and per-user store sessions are covered in tests/test_login.py, tests/test_oauth.py, and tests/test_store_login.py.

Docker

docker build -t bring-fast .
docker run --rm -p 8877:8877 \
  -e BRINGFAST_PUBLIC_URL=https://your-public-host \
  -v bringfast-data:/data \
  bring-fast

License

MIT