Inspection report
sp-api-mcp
Open source MCP server from haloshin. Tool list: code-checked7.
The answer
4
What can it change in your account?
4 of 21 tools can change data, in these areas: Listings, Pricing.
name based Read and write here are inferred from tool names and descriptions, not from a test.
| Area | Access | Write tools | Read tools |
|---|---|---|---|
| Orders | R Orders read only | 0 | 2 |
| Ads | ยท Ads no tool on record | 0 | 0 |
| Listings | W Listings can change data | 1 | 4 |
| Pricing | W Pricing can change data | 1 | 2 |
| Inventory | R Inventory read only | 0 | 1 |
| Reports | R Reports read only | 0 | 3 |
| Finance | R Finance read only | 0 | 2 |
Record
The facts on file.
- Type
- open-source
- Vendor or owner
- haloshin
- License
- MIT3
- Authentication
- LWA refresh token, OAuth (mentioned)4
- Transport
- stdio
- Marketplaces
- AU, BR, DE, ES, FR, IT, JP, MX, NL, UK, US6
- Pricing
- free / open source (self-hosted; upstream API costs apply)5
- Last commit
- Jun 22, 2026
- Last release
- Not published
- GitHub stars
- 2
- Tool list from
- code-checked7
Tools
All 21 tools we found.
Grouped by what they do to your data. The access column shows why we put a tool there.
write Can change data 4
| Tool | Area | Access basis |
|---|---|---|
| send_message | Other | name based |
| send_solicitation | Other | name based |
| update_listing | Listings | name based |
| update_price | Pricing | name based |
read Reads data 17
| Tool | Area | Access basis |
|---|---|---|
| estimate_fees | Finance | name based |
| get_competitive_pricing | Pricing | name based |
| get_financial_events | Finance | name based |
| get_inventory | Inventory | name based |
| get_item_offers | Pricing | name based |
| get_listing_restrictions | Listings | name based |
| get_my_listing | Listings | name based |
| get_order_items | Orders | name based |
| get_orders | Orders | name based |
| get_product_info | Other | name based |
| get_product_type_definitions | Listings | name based |
| get_report_status | Reports | name based |
| get_sales_summary | Reports | name based |
| get_search_query_performance | Other | name based |
| list_stores | Other | name based |
| request_report | Reports | name based |
| search_catalog | Listings | name based |
Method
How we checked this server.
We read the tool definitions in the source code. We did not run the server against a seller account.7
Not tested with credentials. We did not connect this server to a seller or ads account. A tool marked read can still have side effects we could not see, and a vendor can add write tools at any time. Check the list again before you grant access.
Areas come from keywords in tool names, as explained on the matrix page.
Notes
Sources for this report
- 1Source repository or product pagegithub.com
- 2Documentationgithub.com
- 3License: GitHub API repo.license (search 2026-10-30)
- 4Authentication: static scan of repo (env names / code patterns)
- 5Pricing: https://github.com/haloshin/sp-api-mcpgithub.com
- 6Marketplaces: marketplace IDs found in code
- 7Our MCP inventory of Oct 30, 2026: tool list, access marks, stars and last commit. GitHub repository search (22 queries, unauthenticated) -> shallow clone -> static extraction (extract_tools.py) -> optional runtime tools/list (mcp_probe.py); vendor/official from public docs. access=read|write is a name/description heuristic unless access_basis says otherwise.