io.github.DeviceIngineering/wb-mcp-server
PYPI · WB-MCP-SERVER
Wildberries Seller API, 197 tools; responses measured and trimmed: 770k to 75k tokens.
Available components
Last scanned (3 hours ago)
Scores higher than 92% of PyPI servers
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs hatchling.build at install time, a recognised build step with no custom scripting around it. View diagnostics → Pass
- 0 of 37 dependencies flagged as unhealthy. View diagnostics → Pass
Provenance & Transparency97
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to DeviceIngineering/wb-mcp-server). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 41 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability68
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 9674 tokens (~49/item across 197 items; 197 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management93
- Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage78
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 34% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 12 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "wb_tag_delete" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 197 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Oct 26 −2
- Stability: pass → 0.80 functional
- 12 Oct 26 0
- Stability: 0.97 → pass security
- 4 Oct 26 0
- Stability: fail → 0.97 functional
- 3 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 2 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 91 to 94.
- 30 Sept 26 −14
- Malware scan: pass → unverified ▼ security
- 29 Sept 26 +20
- Malware scan: unverified → pass ▲ security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 17 Oct 2026 · Analysed pypi/wb-mcp-server@2.6.1
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | pypi |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | DeviceIngineering/wb-mcp-server |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/DeviceIngineering/wb-mcp-server/.github/workflows/publish.yml@refs/tags/v2.6.1 |
| Rekor log index | 2722376250 |
| Predicate type | PyPI publish attestation https://docs.pypi.org/attestations/publish/v1 |
| Subject digest | sha256:7079222880c9b0cc71dc18885eac96ae0614fb74f455379a989b19975e5588c7 |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | hatchling.build |
Background: Why install scripts are a supply-chain risk →
Dependencies 37 packages
| Packages resolved | 37 |
|---|---|
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
wb_cards_move_to_trash ~38
Move cards to trash by nmID (удалить карточки).
| Name | Type | Req | Description |
|---|---|---|---|
| nm_ids | array | yes | nmIDs to delete |
No output schema declared.
No examples provided.
wb_cards_recover_from_trash ~40
Restore cards from trash by nmID (восстановить карточки).
| Name | Type | Req | Description |
|---|---|---|---|
| nm_ids | array | yes | nmIDs to restore |
No output schema declared.
No examples provided.
wb_cards_trash ~25
Cards in trash (корзина).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
wb_cards_update ~33
Update cards: description, SEO, characteristics (обновить карточку).
| Name | Type | Req | Description |
|---|---|---|---|
| cards | array | yes | updated cards |
No output schema declared.
No examples provided.
wb_categories_parent ~34
All parent product categories (родительские категории).
| Name | Type | Req | Description |
|---|---|---|---|
| locale | string | – | ru | en | zh, default ru |
No output schema declared.
No examples provided.
wb_cc_order_action ~56
[P0] Change click-and-collect status: action = confirm|prepare|receive|reject|cancel (статус самовывоза).
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| order_id | integer | yes | – |
No output schema declared.
No examples provided.
wb_cc_order_identity ~48
[P0] Verify the buyer code when handing over a click-and-collect order (код покупателя).
| Name | Type | Req | Description |
|---|---|---|---|
| order_code | string | yes | – |
| passcode | string | yes | – |
No output schema declared.
No examples provided.
wb_cc_order_meta_delete ~42
Delete click-and-collect meta by key (удалить маркировку).
| Name | Type | Req | Description |
|---|---|---|---|
| key | string | yes | – |
| order_id | integer | yes | – |
No output schema declared.
No examples provided.
wb_cc_order_meta_get ~34
Click-and-collect task meta (метаданные самовывоза).
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | integer | yes | – |
No output schema declared.
No examples provided.
wb_cc_order_meta_set ~70
Click-and-collect marking: sgtin|uin|imei|gtin, status confirm (маркировка самовывоза).
| Name | Type | Req | Description |
|---|---|---|---|
| meta_type | string | yes | – |
| order_id | integer | yes | – |
| value | – | yes | sgtin: array; others: string |
No output schema declared.
No examples provided.
wb_cc_orders ~63
Finished click-and-collect tasks, Unix timestamps, ≤30 days (задания самовывоза).
| Name | Type | Req | Description |
|---|---|---|---|
| date_from | integer | yes | Unix ts |
| date_to | integer | yes | – |
| limit | integer | – | – |
| next | integer | – | – |
No output schema declared.
No examples provided.
wb_cc_orders_client ~34
Buyer data, statuses confirm/prepare (покупатель самовывоза).
| Name | Type | Req | Description |
|---|---|---|---|
| order_ids | array | yes | – |
No output schema declared.
No examples provided.
wb_cc_orders_new ~25
New click-and-collect tasks (новые задания самовывоза).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
wb_cc_orders_status ~33
Click-and-collect task statuses (статусы самовывоза).
| Name | Type | Req | Description |
|---|---|---|---|
| order_ids | array | yes | – |
No output schema declared.
No examples provided.
wb_chat_download ~39
Download a file from a buyer chat; file_id comes from a chat event (файл из чата).
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | – |
No output schema declared.
No examples provided.
wb_chat_events ~47
Chat events, new messages. Cursor pagination: first call without next, then next from the response (события чатов).
| Name | Type | Req | Description |
|---|---|---|---|
| next_cursor | integer | – | cursor from previous response |
No output schema declared.
No examples provided.
wb_chat_send ~53
Send a message to a buyer chat, ≤1000 chars. reply_sign comes from wb_buyer_chats (написать покупателю).
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | – |
| reply_sign | string | yes | – |
No output schema declared.
No examples provided.
wb_dbs_groups_info ~35
Paid delivery cost by groupId, max 1000 (стоимость доставки).
| Name | Type | Req | Description |
|---|---|---|---|
| group_ids | array | yes | – |
No output schema declared.
No examples provided.
wb_dbs_order_action ~77
[P0] Change DBS order status: action = confirm|deliver|receive|reject|cancel. receive/reject need the buyer code (статус DBS-заказа).
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| code | string | – | buyer code, for receive/reject |
| order_id | integer | yes | – |
No output schema declared.
No examples provided.
wb_dbs_order_meta_delete ~42
Delete DBS order meta by key (удалить маркировку DBS).
| Name | Type | Req | Description |
|---|---|---|---|
| key | string | yes | – |
| order_id | integer | yes | – |
No output schema declared.
No examples provided.
wb_dbs_order_meta_get ~29
DBS order meta (метаданные DBS).
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | integer | yes | – |
No output schema declared.
No examples provided.
wb_dbs_order_meta_set ~66
DBS order marking: sgtin|uin|imei|gtin, status confirm (маркировка DBS).
| Name | Type | Req | Description |
|---|---|---|---|
| meta_type | string | yes | – |
| order_id | integer | yes | – |
| value | – | yes | sgtin: array; others: string |
No output schema declared.
No examples provided.
wb_dbs_orders ~61
Finished DBS orders, Unix timestamps, ≤30 days, cursor next (DBS-заказы).
| Name | Type | Req | Description |
|---|---|---|---|
| date_from | integer | yes | Unix ts |
| date_to | integer | yes | – |
| limit | integer | – | – |
| next | integer | – | – |
No output schema declared.
No examples provided.
wb_dbs_orders_client ~31
DBS buyer data, after confirm (покупатель DBS).
| Name | Type | Req | Description |
|---|---|---|---|
| order_ids | array | yes | – |
No output schema declared.
No examples provided.
wb_dbs_orders_delivery_date ~38
Delivery date/time chosen by the DBS buyer, max 1000 (дата доставки).
| Name | Type | Req | Description |
|---|---|---|---|
| order_ids | array | yes | – |
No output schema declared.
No examples provided.
wb_dbs_orders_new ~23
New DBS orders awaiting assembly (новые DBS-заказы).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
wb_dbs_orders_status ~33
DBS order statuses, max 1000 (статусы DBS).
| Name | Type | Req | Description |
|---|---|---|---|
| order_ids | array | yes | – |
No output schema declared.
No examples provided.
wb_deductions ~69
Deductions for substitutions and wrong contents (удержания за подмены). Both dates are required: WB rejects the call without date_from.
| Name | Type | Req | Description |
|---|---|---|---|
| date_from | string | yes | YYYY-MM-DD |
| date_to | string | yes | YYYY-MM-DD |
| limit | integer | – | – |
No output schema declared.
No examples provided.
wb_degradations ~39
Tool degradations: which MCP tools used to work and now fail steadily, signalling a WB API change. No parameters (деградации).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
wb_diagnostics ~63
[P0] Full self-diagnostics: ping all WB API hosts, light real requests per category, token analysis (expiry, scopes). Run FIRST when a tool misbehaves — separates a token problem from a category or WB API change (диагностика).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
wb_directory ~70
WB reference books: colors, kinds, countries, seasons, vat, tnved (справочники).
| Name | Type | Req | Description |
|---|---|---|---|
| directory | string | yes | colors | kinds | countries | seasons | vat | tnved |
| search | string | – | for tnved |
| subject_id | integer | – | for tnved |
No output schema declared.
No examples provided.
wb_document_download ~38
Download one document, PDF/XML, by ID (скачать документ).
| Name | Type | Req | Description |
|---|---|---|---|
| document_id | string | yes | document id from wb_documents_list |
No output schema declared.
No examples provided.
wb_documents_categories ~26
Document categories: reconciliation acts, УПД, invoices (категории документов).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
wb_documents_download_bulk ~32
Download several documents in one request by IDs (скачать документы).
| Name | Type | Req | Description |
|---|---|---|---|
| document_ids | array | yes | – |
No output schema declared.
No examples provided.
wb_documents_list ~94
Seller financial documents: acts, УПД, notices. Needed for accounting (документы, бухгалтерия).
| Name | Type | Req | Description |
|---|---|---|---|
| category_id | integer | – | category id from wb_documents_categories |
| date_from | string | – | start date |
| date_to | string | – | end date |
| limit | integer | – | – |
| view | string | – | compact (default) trims heavy fields; full returns the raw API response |
No output schema declared.
No examples provided.
wb_fbw_acceptance_options ~57
Warehouses and packaging types available for an FBW supply, by barcodes (варианты приёмки).
| Name | Type | Req | Description |
|---|---|---|---|
| items | array | yes | [{barcode, quantity}, ...] |
| warehouse_id | integer | – | one warehouse |
No output schema declared.
No examples provided.
wb_fbw_supplies ~58
FBW supplies to WB warehouses, read-only; creation lives in the seller portal (поставки FBW).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| offset | integer | – | – |
| status_ids | array | – | status filter |
No output schema declared.
No examples provided.
wb_fbw_supply_detail ~31
FBW supply details (детали поставки FBW).
| Name | Type | Req | Description |
|---|---|---|---|
| supply_id | integer | yes | – |
No output schema declared.
No examples provided.
wb_fbw_supply_goods ~39
Goods inside an FBW supply (товары в поставке).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| supply_id | integer | yes | – |
No output schema declared.
No examples provided.
wb_fbw_transit_tariffs ~37
Transit directions for FBW supplies to regions (транзитные тарифы). Temporarily disabled by WB itself.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
wb_fbw_warehouses ~38
WB warehouses for FBW supplies (склады FBW). Temporarily disabled by WB itself — returns an explanation, not data.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
wb_feedback_order_return ~42
Request a product return from a feedback, only if isAbleReturnProductOrders=true (возврат по отзыву).
| Name | Type | Req | Description |
|---|---|---|---|
| feedback_id | string | yes | – |
No output schema declared.
No examples provided.
wb_feedback_reply ~49
Reply to a feedback; edit=true rewrites an existing reply (ответить на отзыв).
| Name | Type | Req | Description |
|---|---|---|---|
| edit | boolean | – | – |
| feedback_id | string | yes | – |
| text | string | yes | – |
No output schema declared.
No examples provided.
wb_feedbacks_actions ~62
Complain about a feedback or report a product problem, codes from supplier-valuations (жалоба на отзыв).
| Name | Type | Req | Description |
|---|---|---|---|
| feedback_id | string | yes | – |
| feedback_valuation | integer | – | complaint reason |
| product_valuation | integer | – | product problem |
No output schema declared.
No examples provided.
wb_feedbacks_archive ~53
Archived feedbacks, previously answered, unlike wb_feedbacks_list (архив отзывов).
| Name | Type | Req | Description |
|---|---|---|---|
| nm_id | integer | – | nmID filter |
| skip | integer | – | – |
| take | integer | – | – |
No output schema declared.
No examples provided.
wb_feedbacks_count ~22
Count of unanswered feedbacks (неотвеченные отзывы).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
wb_feedbacks_count_period ~58
Feedback count for a period, Unix ts, isAnswered filter (число отзывов за период).
| Name | Type | Req | Description |
|---|---|---|---|
| date_from | integer | – | Unix ts |
| date_to | integer | – | – |
| is_answered | boolean | – | – |
No output schema declared.
No examples provided.
wb_feedbacks_list ~58
Feedback list. Unanswered negatives cut rating and conversion (отзывы).
| Name | Type | Req | Description |
|---|---|---|---|
| is_answered | boolean | – | true = answered, false = unanswered |
| nm_id | integer | – | nmID filter |
| take | integer | – | – |
No output schema declared.
No examples provided.
wb_feedbacks_pins ~28
Pinned feedbacks shown first on the card (закреплённые отзывы).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
wb_feedbacks_pins_count ~30
Pinned feedback count, limit 3 per nmID (число закреплённых).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
How do I install the io.github.DeviceIngineering/wb-mcp-server server?
io.github.DeviceIngineering/wb-mcp-server runs locally as a PyPI package, launched with uvx wb-mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · wb-mcp-server
claude mcp add deviceingineering-wb-mcp-server -- uvx wb-mcp-server
What is the io.github.DeviceIngineering/wb-mcp-server server?
io.github.DeviceIngineering/wb-mcp-server is listed in the public MCP registry as io.github.DeviceIngineering/wb-mcp-server. Wildberries Seller API, 197 tools; responses measured and trimmed: 770k to 75k tokens. This page covers its PyPI package (wb-mcp-server).
Is the io.github.DeviceIngineering/wb-mcp-server server safe to use?
io.github.DeviceIngineering/wb-mcp-server scores 89 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 17 October 2026. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.DeviceIngineering/wb-mcp-server server expose?
io.github.DeviceIngineering/wb-mcp-server exposes 197 tools: wb_list_shops, wb_card_errors, wb_cards_list, wb_card_detail, wb_cards_update, and 192 more. Their descriptions and schemas cost roughly 9,674 tokens of context every time the server is loaded.
Is the io.github.DeviceIngineering/wb-mcp-server server still maintained?
io.github.DeviceIngineering/wb-mcp-server is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.DeviceIngineering/wb-mcp-server server under?
io.github.DeviceIngineering/wb-mcp-server declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.