← Back to search

io.github.dontsovcmc/yandex-market-seller

dontsovcmc Scanned 20d ago

MCP server for Yandex Market Partner API — orders, offers, prices, stocks, analytics

C
69.3 / 100

Versions

0.6.0latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 18

ym_stocks
annotations: none low

Get product stocks for a campaign. Returns warehouse stocks per SKU. Use ym_execute with action stocks_update to change stock quantities.

limit int page_token str campaign_id int
ym_order_status
annotations: none low

Update order status. Typical flow: PROCESSING → DELIVERY → DELIVERED. Args: status, substatus (optional). Use ym_execute with action order_status_batch for multiple orders.

status str order_id int substatus str campaign_id int
ym_offers
annotations: none low

List products (offer mappings) at business level. Returns SKU, name, category, mapping status. Paginated. Use ym_execute with action campaign_offers for campaign-level offers.

limit int offer_ids str page_token str business_id int
ym_search
annotations: none low

Find available actions by intent. Optional domain filter: orders, offers, prices, stocks, shipments, returns, feedbacks, chats, reports, bids, outlets, campaigns, geo, categories, warehouses, promos, quality, tariffs, supply, operations, delivery, logistics. Returns action ID, description, and JSON Schema of parameters.

query str domain str
ym_execute
annotations: none low

Execute action by ID. params_json validated against action schema. Use ym_search to discover actions and their schemas first.

action str params_json str
ym_execute_file
annotations: none low

Execute action that downloads a file (PDF/binary). output_path must be under ~/... or /tmp/...

action str output_path str params_json str
ym_campaigns
annotations: none low

List all campaigns (shops) in the account. Returns array of {id, domain, placementType}. Use ym_campaign for details of a single campaign.

ym_orders
annotations: none low

List orders with optional status filter. Statuses: UNPAID, PROCESSING, DELIVERY, PICKUP, DELIVERED, CANCELLED. Returns paginated list. Use ym_order for single order details.

page int status str page_size int campaign_id int
ym_order
annotations: none low

Get full order details: items, delivery, buyer info, status history. Use ym_orders to search/filter multiple orders.

order_id int campaign_id int
ym_stocks_update
annotations: none low

Update product stocks. Args: stocks_json — JSON array of {sku, warehouseId, items: [{count, type, updatedAt}]}.

campaign_id int stocks_json str
ym_prices
annotations: none low

Get product prices at business level. Returns current prices, currency. Use ym_execute with action campaign_offers for campaign-level prices.

limit int offer_ids str page_token str business_id int
ym_prices_update
annotations: none low

Update product prices. Args: prices_json — JSON array of {offerId, price {value, currencyId}}. Business-level operation.

business_id int prices_json str
ym_returns
annotations: none low

List returns for a campaign. Paginated. Use ym_execute with action return for single return details.

page int page_size int campaign_id int
ym_shipments
annotations: none low

List first-mile shipments. Use ym_execute with action shipments_search for advanced filtering.

campaign_id int
ym_feedbacks
annotations: none low

Get product reviews/feedbacks. Paginated. Use ym_execute with action feedback_comments for comments on a review.

limit int page_token str business_id int
ym_chats
annotations: none low

List buyer chats. Use ym_execute with action chat_history for messages, chat_send to reply.

limit int page_token str business_id int
ym_bids
annotations: none low

Get current bids at business level. Use ym_execute with action bid_recommendations for suggested values, bids_update to change.

limit int offer_ids str page_token str business_id int
ym_report_generate
annotations: none low

Start async report generation. Returns reportId for polling with ym_execute action report_status. Types: united-netting, united-marketplace-services, united-orders, united-returns, goods-realization, stocks-on-warehouses, goods-movement, shows-sales.

report_type str payload_json str

Permissions 3

network medium
Server uses network capabilities via: requests
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, tempfile
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 68

low
Tool 'ym_search' has no annotations annotation_checker · 100%
low
Tool 'ym_execute' has no annotations annotation_checker · 100%
low
Tool 'ym_execute_file' has no annotations annotation_checker · 100%
low
Tool 'ym_campaigns' has no annotations annotation_checker · 100%
low
Tool 'ym_orders' has no annotations annotation_checker · 100%
low
Tool 'ym_order' has no annotations annotation_checker · 100%
low
Tool 'ym_order_status' has no annotations annotation_checker · 100%
low
Tool 'ym_offers' has no annotations annotation_checker · 100%
low
Tool 'ym_stocks' has no annotations annotation_checker · 100%
low
Tool 'ym_stocks_update' has no annotations annotation_checker · 100%
low
Tool 'ym_prices' has no annotations annotation_checker · 100%
low
Tool 'ym_prices_update' has no annotations annotation_checker · 100%
low
Tool 'ym_returns' has no annotations annotation_checker · 100%
low
Tool 'ym_shipments' has no annotations annotation_checker · 100%
low
Tool 'ym_feedbacks' has no annotations annotation_checker · 100%
low
Tool 'ym_chats' has no annotations annotation_checker · 100%
low
Tool 'ym_bids' has no annotations annotation_checker · 100%
low
Tool 'ym_report_generate' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28 (GHSA-j8r2-6x86-q33q) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28 (PYSEC-2023-74) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28 (PYSEC-2026-1873) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28 (PYSEC-2026-2275) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0 (PYSEC-2026-2270) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: ym_search manifest_parser · 90%
info
Tool: ym_execute manifest_parser · 90%
info
Tool: ym_execute_file manifest_parser · 90%
info
Tool: ym_campaigns manifest_parser · 90%
info
Tool: ym_orders manifest_parser · 90%
info
Tool: ym_order manifest_parser · 90%
info
Tool: ym_order_status manifest_parser · 90%
info
Tool: ym_offers manifest_parser · 90%
info
Tool: ym_stocks manifest_parser · 90%
info
Tool: ym_stocks_update manifest_parser · 90%
info
Tool: ym_prices manifest_parser · 90%
info
Tool: ym_prices_update manifest_parser · 90%
info
Tool: ym_returns manifest_parser · 90%
info
Tool: ym_shipments manifest_parser · 90%
info
Tool: ym_feedbacks manifest_parser · 90%
info
Tool: ym_chats manifest_parser · 90%
info
Tool: ym_bids manifest_parser · 90%
info
Tool: ym_report_generate manifest_parser · 90%
info
Required env vars (6) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%