# Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market, Avito (oci · ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1)

Wildberries, Ozon, Yandex Market & Avito seller APIs for AI assistants: schema-driven, safety-gated.

- Trust score: 37/100 (low)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-20

## Components

- npm · `marketplaces-mcp-ru`: 50/100, [markdown](https://verifymcp.io/servers/ilyautov-marketplaces-mcp-ru/marketplaces-mcp-ru-2.md), [page](https://verifymcp.io/servers/ilyautov-marketplaces-mcp-ru/marketplaces-mcp-ru-2)
- oci · `ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1`: 37/100 (this document), [markdown](https://verifymcp.io/servers/ilyautov-marketplaces-mcp-ru/ghcr-io-ilyautov-marketplaces-mcp-ru-0-6-1.md), [page](https://verifymcp.io/servers/ilyautov-marketplaces-mcp-ru/ghcr-io-ilyautov-marketplaces-mcp-ru-0-6-1)
- pypi · `marketplaces-mcp-ru`: 55/100, [markdown](https://verifymcp.io/servers/ilyautov-marketplaces-mcp-ru/marketplaces-mcp-ru.md), [page](https://verifymcp.io/servers/ilyautov-marketplaces-mcp-ru/marketplaces-mcp-ru)

## Channel facts

- Registry: `oci`
- Package: `ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-20.

- **Supply Chain Security**: 0/100
  - Malware scan not yet available for this package.
  - Known CVEs could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.
  - Install-script risk not yet assessed.
  - Dependency health could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.
- **Provenance & Transparency**: 48/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 5 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 67/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 15149 tokens (~120/item across 126 items; 126 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 71/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 95/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 20 of 25 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "wb_call_method" implies "execute" and declares readOnlyHint instead, contradicting what its own name says it does.
  - An AI judge read all 126 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 2 categories.** Categories scored 0 because we could not verify them: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… server?

Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… runs locally as a container image, launched with docker run --rm -i ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add ilyautov-marketplaces-mcp-ru -- docker run --rm -i ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1
```

### Cursor

```json
{
  "mcpServers": {
    "ilyautov-marketplaces-mcp-ru": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "ilyautov-marketplaces-mcp-ru": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add ilyautov-marketplaces-mcp-ru -- docker run --rm -i ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ilyautov-marketplaces-mcp-ru": {
      "type": "local",
      "command": [
        "docker",
        "run",
        "--rm",
        "-i",
        "ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1"
      ],
      "enabled": true
    }
  }
}
```

### Hermes

```yaml
mcp_servers:
  ilyautov-marketplaces-mcp-ru:
    command: "docker"
    args: ["run", "--rm", "-i", "ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1"]
```

### Netclaw

```json
{
  "McpServers": {
    "ilyautov-marketplaces-mcp-ru": {
      "Transport": "stdio",
      "Command": "docker",
      "Arguments": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1"
      ]
    }
  }
}
```

### Other

```json
{
  "mcpServers": {
    "ilyautov-marketplaces-mcp-ru": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-14 (score 37)

First indexed and scored.

## MCP tools (126)

### `wb_check_auth` (~54 tokens)

Check whether the required credentials are present in the environment.

Does NOT reveal secret values — only reports which variables are set.
Returns JSON: {"ready": bool, "missing": [str], "required": [str]}.

Output parameters:

- `result` (string)

### `wb_list_sections` (~20 tokens)

List API sections and how many catalog endpoints each contains.

Output parameters:

- `result` (string)

### `wb_get_section` (~58 tokens)

List all endpoints in one section.

Args:
    section: section name (see wb_list_sections), e.g. "statistics".
Returns JSON list of {operation_id, method, path, safety, summary}.

Input parameters:

- `section` (string, required)

Output parameters:

- `result` (string)

### `wb_search_methods` (~78 tokens)

Search the endpoint catalog by keyword (works in Russian and English).

Args:
    query: free text, e.g. "остатки", "stocks", "update price".
    limit: max results (1-50).
Returns JSON list of matching endpoints (best first).

Input parameters:

- `limit` (integer)
- `query` (string, required)

Output parameters:

- `result` (string)

### `wb_map` (~81 tokens)

The big picture: business entities this API covers and the go-to
methods for each. Call with no args to see the whole map ("you are
here"); pass entity="reviews" (or stocks/prices/orders/…) to list every
method of one entity. Use this before guessing — it orients you fast.

Input parameters:

- `entity` (string)

Output parameters:

- `result` (string)

### `wb_describe_method` (~49 tokens)

Return the full catalog record for one endpoint: method, host, path,
scope, safety level, pagination style, rate limit, params and doc URL.

Input parameters:

- `operation_id` (string, required)

Output parameters:

- `result` (string)

### `wb_call_method` (~159 tokens)

Execute one READ endpoint from the catalog by operation_id.

Target API: https://dev.wildberries.ru/en/openapi/api-information.

Reads only: nothing here changes data, so it runs without confirmation.
To change data use wb_write_method, to delete use wb_delete_method.

Args:
    operation_id: id from the catalog (see wb_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body (a few read endpoints take one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `wb_write_method` (~169 tokens)

Execute one WRITE endpoint from the catalog: create or update data.

Target API: https://dev.wildberries.ru/en/openapi/api-information.

Requires confirm_write=true; nothing is sent without it. Irreversible
operations live in wb_delete_method, reads in wb_call_method.

Args:
    operation_id: id from the catalog (see wb_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `wb_delete_method` (~192 tokens)

Execute one DESTRUCTIVE endpoint: deletes or irreversibly changes data.

Target API: https://dev.wildberries.ru/en/openapi/api-information.

Both confirm_write=true and i_understand_this_modifies_data=true are
required; nothing is sent without both.

Args:
    operation_id: id from the catalog (see wb_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `i_understand_this_modifies_data` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `wb_get_raw` (~175 tokens)

Read ANY endpoint by path, including ones missing from the catalog.

Target API: https://dev.wildberries.ru/en/openapi/api-information.

Safe verbs only (GET, HEAD, OPTIONS). To change data use
wb_write_raw, to delete use wb_delete_raw.

Args:
    path: full path beginning with '/', e.g. "/ping".
    method: safe verb, GET by default.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body (rare on reads; some APIs want one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `host`
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `wb_write_raw` (~164 tokens)

Create or update data at ANY path, including paths not in the catalog.

Target API: https://dev.wildberries.ru/en/openapi/api-information.

POST, PUT and PATCH only; requires confirm_write=true.

Args:
    method: POST, PUT or PATCH.
    path: full path beginning with '/'.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `method` (string, required)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `wb_delete_raw` (~192 tokens)

Delete data at ANY path, including paths not in the catalog.

Target API: https://dev.wildberries.ru/en/openapi/api-information.

DELETE only. Both confirm_write=true and
i_understand_this_modifies_data=true are required.

Args:
    path: full path beginning with '/'.
    method: DELETE.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `i_understand_this_modifies_data` (boolean)
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `wb_fetch_all` (~195 tokens)

Auto-paginate a read endpoint and return every row in one response.

Handles offset, last_id, cursor (Ozon v4/v5), page and WB lastChangeDate
styles. The array path is taken from the catalog automatically.

Args:
    operation_id: a read endpoint from the catalog.
    query / body / path_values: base parameters (cursor fields are managed).
    items_path: override the array path (default: the endpoint's own).
    limit: page size to request.
    max_items: hard cap to protect context (default 10000).
Returns JSON: {"ok", "items", "total_fetched", "pages_fetched", "truncated"}.

Input parameters:

- `body`
- `items_path`
- `limit` (integer)
- `max_items` (integer)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `wb_list_cabinets` (~53 tokens)

List configured cabinets for this marketplace and which one is active.

Returns JSON: {"active": str|null, "cabinets": [names], "fields_needed": [...]}.
Secret values are never returned.

Output parameters:

- `result` (string)

### `wb_add_cabinet` (~218 tokens)

Add or update a cabinet (a named set of API credentials), from chat.

⚠️ This puts the key into the chat transcript — requires
i_understand_key_goes_to_chat=true. The terminal-free safe alternative is
the installer (install.py / double-click), where the key never enters chat.

Args:
    credentials: dict with the required fields for this service
        ({fields}). For Ozon: {{"client_id": "...", "api_key": "..."}};
        for WB: {{"token": "..."}}.
    name: optional label. If omitted, the cabinet is named after the real
        shop name fetched from the marketplace (falls back to "main").
    i_understand_key_goes_to_chat: must be true to proceed.
Saved to ~/.marketplace-mcp/cabinets.json (local, chmod 600), never echoed.

Input parameters:

- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)
- `name` (string)

Output parameters:

- `result` (string)

### `wb_set_key` (~221 tokens)

Change / rotate the API key from chat (e.g. the old one expired or
leaked).

⚠️ The key goes into the chat transcript — requires
i_understand_key_goes_to_chat=true. The safe, terminal-free alternative
is the installer, where the key never enters chat. Use a scoped key and
rotate it in the seller cabinet if it was exposed.

Args:
    credentials: dict with the required fields ({fields}).
    cabinet: which cabinet to update. Default: the active one (so "my key
        expired" just works). If there is none, the cabinet is named from
        the marketplace's shop name, else "main".
    i_understand_key_goes_to_chat: must be true to proceed.
On success the key is validated against the marketplace and the shop name
is reported. Saved locally (chmod 600), never echoed back.

Input parameters:

- `cabinet` (string)
- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)

Output parameters:

- `result` (string)

### `wb_use_cabinet` (~48 tokens)

Switch the active cabinet. Subsequent API calls use its credentials.

Args:
    name: the cabinet to activate (see wb_list_cabinets).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `wb_remove_cabinet` (~42 tokens)

Delete a stored cabinet. If it was active, another becomes active.

Args:
    name: the cabinet to remove.

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `wb_list_workflows` (~57 tokens)

List ready-made analytical workflows (recipes) for this marketplace.

        Returns JSON: [{name, category, when_to_use}]. Use {svc}_get_workflow
        to fetch the full step-by-step plan for one.

Output parameters:

- `result` (string)

### `wb_get_workflow` (~68 tokens)

Return the full plan for one workflow: ordered steps (each naming a
        catalog operation_id and why), interpretation guidance, and common
        mistakes to avoid.

        Args:
            name: workflow name (see {svc}_list_workflows).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `wb_get_sales` (~156 tokens)

Get Wildberries sales and returns since a date (Statistics API, 1 req/min).

    Args:
        date_from: RFC3339 date/time in MSK, e.g. "2026-06-01" or "2026-06-01T00:00:00".
        flag: 0 = rows changed since date_from (incremental); 1 = rows dated on date_from.
    Returns JSON: {"ok": true, "status", "data": [ sale rows ]} or error envelope.
    Each row includes saleID, srid, nmId, totalPrice, forPay, lastChangeDate.

Input parameters:

- `date_from` (string, required)
- `flag` (integer)

Output parameters:

- `result` (string)

### `wb_get_stocks` (~116 tokens)

Get the current Wildberries stock snapshot (Statistics API, 1 req/min).

    Stocks have no history — this is a point-in-time snapshot. Use an early
    date_from to get the full current set.

    Args:
        date_from: RFC3339 date; default "2020-01-01" returns everything in stock now.
    Returns JSON: {"ok": true, "data": [ stock rows ]} with quantity, warehouseName, nmId.

Input parameters:

- `date_from` (string)

Output parameters:

- `result` (string)

### `wb_get_new_orders` (~60 tokens)

Get new FBS assembly orders awaiting processing (Marketplace API).

    Returns JSON: {"ok": true, "data": {"orders": [...]}} — each order has id,
    rid, article, skus, createdAt, warehouseId.

Output parameters:

- `result` (string)

### `wb_get_prices` (~105 tokens)

Get current prices and discounts for products (Discounts-Prices API).

    Args:
        limit: page size (<=1000).
        offset: pagination offset.
        filter_nm_id: optional single nmID to filter by.
    Returns JSON: {"ok": true, "data": {"listGoods": [{nmID, sizes, discount, ...}]}}.

Input parameters:

- `filter_nm_id`
- `limit` (integer)
- `offset` (integer)

Output parameters:

- `result` (string)

### `wb_set_price` (~159 tokens)

Set price and discount for ONE product (Discounts-Prices API). WRITE.

    Requires confirm_write=true (this changes your live price). A new price 3x
    below the old one lands the product in WB price quarantine.

    Args:
        nm_id: product nmID.
        price: new base price in rubles (integer).
        discount: discount percent (0-99).
        confirm_write: must be true to actually send the change.
    Returns JSON: {"ok": true, "data": {"id": uploadID}} — poll wb_prices_history_tasks.

Input parameters:

- `confirm_write` (boolean)
- `discount` (integer)
- `nm_id` (integer, required)
- `price` (integer, required)

Output parameters:

- `result` (string)

### `ozon_check_auth` (~55 tokens)

Check whether the required credentials are present in the environment.

Does NOT reveal secret values — only reports which variables are set.
Returns JSON: {"ready": bool, "missing": [str], "required": [str]}.

Output parameters:

- `result` (string)

### `ozon_list_sections` (~21 tokens)

List API sections and how many catalog endpoints each contains.

Output parameters:

- `result` (string)

### `ozon_get_section` (~60 tokens)

List all endpoints in one section.

Args:
    section: section name (see ozon_list_sections), e.g. "statistics".
Returns JSON list of {operation_id, method, path, safety, summary}.

Input parameters:

- `section` (string, required)

Output parameters:

- `result` (string)

### `ozon_search_methods` (~79 tokens)

Search the endpoint catalog by keyword (works in Russian and English).

Args:
    query: free text, e.g. "остатки", "stocks", "update price".
    limit: max results (1-50).
Returns JSON list of matching endpoints (best first).

Input parameters:

- `limit` (integer)
- `query` (string, required)

Output parameters:

- `result` (string)

### `ozon_map` (~82 tokens)

The big picture: business entities this API covers and the go-to
methods for each. Call with no args to see the whole map ("you are
here"); pass entity="reviews" (or stocks/prices/orders/…) to list every
method of one entity. Use this before guessing — it orients you fast.

Input parameters:

- `entity` (string)

Output parameters:

- `result` (string)

### `ozon_describe_method` (~50 tokens)

Return the full catalog record for one endpoint: method, host, path,
scope, safety level, pagination style, rate limit, params and doc URL.

Input parameters:

- `operation_id` (string, required)

Output parameters:

- `result` (string)

### `ozon_call_method` (~161 tokens)

Execute one READ endpoint from the catalog by operation_id.

Target API: https://docs.ozon.ru/api/seller/.

Reads only: nothing here changes data, so it runs without confirmation.
To change data use ozon_write_method, to delete use ozon_delete_method.

Args:
    operation_id: id from the catalog (see ozon_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body (a few read endpoints take one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ozon_write_method` (~171 tokens)

Execute one WRITE endpoint from the catalog: create or update data.

Target API: https://docs.ozon.ru/api/seller/.

Requires confirm_write=true; nothing is sent without it. Irreversible
operations live in ozon_delete_method, reads in ozon_call_method.

Args:
    operation_id: id from the catalog (see ozon_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ozon_delete_method` (~192 tokens)

Execute one DESTRUCTIVE endpoint: deletes or irreversibly changes data.

Target API: https://docs.ozon.ru/api/seller/.

Both confirm_write=true and i_understand_this_modifies_data=true are
required; nothing is sent without both.

Args:
    operation_id: id from the catalog (see ozon_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `i_understand_this_modifies_data` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ozon_get_raw` (~178 tokens)

Read ANY endpoint by path, including ones missing from the catalog.

Target API: https://docs.ozon.ru/api/seller/.

Safe verbs only (GET, HEAD, OPTIONS). To change data use
ozon_write_raw, to delete use ozon_delete_raw.

Args:
    path: full path beginning with '/', e.g. "/v1/actions".
    method: safe verb, GET by default.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body (rare on reads; some APIs want one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `host`
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ozon_write_raw` (~163 tokens)

Create or update data at ANY path, including paths not in the catalog.

Target API: https://docs.ozon.ru/api/seller/.

POST, PUT and PATCH only; requires confirm_write=true.

Args:
    method: POST, PUT or PATCH.
    path: full path beginning with '/'.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `method` (string, required)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ozon_delete_raw` (~191 tokens)

Delete data at ANY path, including paths not in the catalog.

Target API: https://docs.ozon.ru/api/seller/.

DELETE only. Both confirm_write=true and
i_understand_this_modifies_data=true are required.

Args:
    path: full path beginning with '/'.
    method: DELETE.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `i_understand_this_modifies_data` (boolean)
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ozon_fetch_all` (~196 tokens)

Auto-paginate a read endpoint and return every row in one response.

Handles offset, last_id, cursor (Ozon v4/v5), page and WB lastChangeDate
styles. The array path is taken from the catalog automatically.

Args:
    operation_id: a read endpoint from the catalog.
    query / body / path_values: base parameters (cursor fields are managed).
    items_path: override the array path (default: the endpoint's own).
    limit: page size to request.
    max_items: hard cap to protect context (default 10000).
Returns JSON: {"ok", "items", "total_fetched", "pages_fetched", "truncated"}.

Input parameters:

- `body`
- `items_path`
- `limit` (integer)
- `max_items` (integer)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ozon_list_cabinets` (~54 tokens)

List configured cabinets for this marketplace and which one is active.

Returns JSON: {"active": str|null, "cabinets": [names], "fields_needed": [...]}.
Secret values are never returned.

Output parameters:

- `result` (string)

### `ozon_add_cabinet` (~219 tokens)

Add or update a cabinet (a named set of API credentials), from chat.

⚠️ This puts the key into the chat transcript — requires
i_understand_key_goes_to_chat=true. The terminal-free safe alternative is
the installer (install.py / double-click), where the key never enters chat.

Args:
    credentials: dict with the required fields for this service
        ({fields}). For Ozon: {{"client_id": "...", "api_key": "..."}};
        for WB: {{"token": "..."}}.
    name: optional label. If omitted, the cabinet is named after the real
        shop name fetched from the marketplace (falls back to "main").
    i_understand_key_goes_to_chat: must be true to proceed.
Saved to ~/.marketplace-mcp/cabinets.json (local, chmod 600), never echoed.

Input parameters:

- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)
- `name` (string)

Output parameters:

- `result` (string)

### `ozon_set_key` (~222 tokens)

Change / rotate the API key from chat (e.g. the old one expired or
leaked).

⚠️ The key goes into the chat transcript — requires
i_understand_key_goes_to_chat=true. The safe, terminal-free alternative
is the installer, where the key never enters chat. Use a scoped key and
rotate it in the seller cabinet if it was exposed.

Args:
    credentials: dict with the required fields ({fields}).
    cabinet: which cabinet to update. Default: the active one (so "my key
        expired" just works). If there is none, the cabinet is named from
        the marketplace's shop name, else "main".
    i_understand_key_goes_to_chat: must be true to proceed.
On success the key is validated against the marketplace and the shop name
is reported. Saved locally (chmod 600), never echoed back.

Input parameters:

- `cabinet` (string)
- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)

Output parameters:

- `result` (string)

### `ozon_use_cabinet` (~50 tokens)

Switch the active cabinet. Subsequent API calls use its credentials.

Args:
    name: the cabinet to activate (see ozon_list_cabinets).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ozon_remove_cabinet` (~43 tokens)

Delete a stored cabinet. If it was active, another becomes active.

Args:
    name: the cabinet to remove.

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ozon_list_workflows` (~58 tokens)

List ready-made analytical workflows (recipes) for this marketplace.

        Returns JSON: [{name, category, when_to_use}]. Use {svc}_get_workflow
        to fetch the full step-by-step plan for one.

Output parameters:

- `result` (string)

### `ozon_get_workflow` (~69 tokens)

Return the full plan for one workflow: ordered steps (each naming a
        catalog operation_id and why), interpretation guidance, and common
        mistakes to avoid.

        Args:
            name: workflow name (see {svc}_list_workflows).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ozon_get_products` (~132 tokens)

List Ozon products (one page).

    Args:
        visibility: ALL | VISIBLE | INVISIBLE | ARCHIVED | IN_SALE ...
        limit: page size (<=1000).
        last_id: cursor from a previous page (empty for first page).
    Returns JSON: {"ok": true, "data": {"result": {"items": [...], "last_id": "..."}}}.
    For every product across pages use ozon_fetch_all with ozon_product_list.

Input parameters:

- `last_id` (string)
- `limit` (integer)
- `visibility` (string)

Output parameters:

- `result` (string)

### `ozon_get_stocks` (~96 tokens)

Get available + reserved stock per product (v4/product/info/stocks).

    Args:
        visibility: product visibility filter (default ALL).
        limit: page size (<=1000).
        last_id: cursor for pagination.
    Returns JSON with stock per product (present, reserved) per warehouse type.

Input parameters:

- `last_id` (string)
- `limit` (integer)
- `visibility` (string)

Output parameters:

- `result` (string)

### `ozon_get_prices` (~101 tokens)

Get prices, commissions and price indexes per product (v5/product/info/prices).

    Args:
        visibility: product visibility filter (default ALL).
        limit: page size (<=1000).
        cursor: pagination cursor from a previous response.
    Returns JSON with price, marketing_seller_price, min_price, commissions, price_indexes.

Input parameters:

- `cursor` (string)
- `limit` (integer)
- `visibility` (string)

Output parameters:

- `result` (string)

### `ozon_get_fbs_unfulfilled` (~127 tokens)

List new/unprocessed FBS shipments awaiting assembly.

    Args:
        cutoff_from: ISO datetime lower bound, e.g. "2026-06-01T00:00:00Z".
        cutoff_to: ISO datetime upper bound.
        limit: page size.
        offset: pagination offset.
    Returns JSON: {"ok": true, "data": {"result": {"postings": [...]}}}.

Input parameters:

- `cutoff_from` (string, required)
- `cutoff_to` (string, required)
- `limit` (integer)
- `offset` (integer)

Output parameters:

- `result` (string)

### `ozon_set_price` (~221 tokens)

Set the price for ONE product by offer_id (v1/product/import/prices). WRITE.

    Requires confirm_write=true. Ozon limits price updates to ~10/product/hour.
    Prices are strings. old_price="0" clears the strikethrough old price.

    Args:
        offer_id: seller's article (offer_id).
        price: new price as a string, e.g. "1499".
        old_price: pre-discount price as string, or "0" to clear.
        min_price: minimum price as string, or "0".
        currency_code: default "RUB".
        confirm_write: must be true to send.
    Returns JSON: {"ok": true, "data": {"result": [{"offer_id", "updated", "errors"}]}}.

Input parameters:

- `confirm_write` (boolean)
- `currency_code` (string)
- `min_price` (string)
- `offer_id` (string, required)
- `old_price` (string)
- `price` (string, required)

Output parameters:

- `result` (string)

### `ozon_perf_check_auth` (~56 tokens)

Check whether the required credentials are present in the environment.

Does NOT reveal secret values — only reports which variables are set.
Returns JSON: {"ready": bool, "missing": [str], "required": [str]}.

Output parameters:

- `result` (string)

### `ozon_perf_list_sections` (~22 tokens)

List API sections and how many catalog endpoints each contains.

Output parameters:

- `result` (string)

### `ozon_perf_get_section` (~62 tokens)

List all endpoints in one section.

Args:
    section: section name (see ozon_perf_list_sections), e.g. "statistics".
Returns JSON list of {operation_id, method, path, safety, summary}.

Input parameters:

- `section` (string, required)

Output parameters:

- `result` (string)

### `ozon_perf_search_methods` (~80 tokens)

Search the endpoint catalog by keyword (works in Russian and English).

Args:
    query: free text, e.g. "остатки", "stocks", "update price".
    limit: max results (1-50).
Returns JSON list of matching endpoints (best first).

Input parameters:

- `limit` (integer)
- `query` (string, required)

Output parameters:

- `result` (string)

### `ozon_perf_map` (~83 tokens)

The big picture: business entities this API covers and the go-to
methods for each. Call with no args to see the whole map ("you are
here"); pass entity="reviews" (or stocks/prices/orders/…) to list every
method of one entity. Use this before guessing — it orients you fast.

Input parameters:

- `entity` (string)

Output parameters:

- `result` (string)

### `ozon_perf_describe_method` (~51 tokens)

Return the full catalog record for one endpoint: method, host, path,
scope, safety level, pagination style, rate limit, params and doc URL.

Input parameters:

- `operation_id` (string, required)

Output parameters:

- `result` (string)

### `ozon_perf_call_method` (~165 tokens)

Execute one READ endpoint from the catalog by operation_id.

Target API: https://docs.ozon.ru/api/performance/.

Reads only: nothing here changes data, so it runs without confirmation.
To change data use ozon_perf_write_method, to delete use ozon_perf_delete_method.

Args:
    operation_id: id from the catalog (see ozon_perf_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body (a few read endpoints take one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ozon_perf_write_method` (~175 tokens)

Execute one WRITE endpoint from the catalog: create or update data.

Target API: https://docs.ozon.ru/api/performance/.

Requires confirm_write=true; nothing is sent without it. Irreversible
operations live in ozon_perf_delete_method, reads in ozon_perf_call_method.

Args:
    operation_id: id from the catalog (see ozon_perf_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ozon_perf_delete_method` (~194 tokens)

Execute one DESTRUCTIVE endpoint: deletes or irreversibly changes data.

Target API: https://docs.ozon.ru/api/performance/.

Both confirm_write=true and i_understand_this_modifies_data=true are
required; nothing is sent without both.

Args:
    operation_id: id from the catalog (see ozon_perf_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `i_understand_this_modifies_data` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ozon_perf_get_raw` (~182 tokens)

Read ANY endpoint by path, including ones missing from the catalog.

Target API: https://docs.ozon.ru/api/performance/.

Safe verbs only (GET, HEAD, OPTIONS). To change data use
ozon_perf_write_raw, to delete use ozon_perf_delete_raw.

Args:
    path: full path beginning with '/', e.g. "/api/client/campaign".
    method: safe verb, GET by default.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body (rare on reads; some APIs want one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `host`
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ozon_perf_write_raw` (~164 tokens)

Create or update data at ANY path, including paths not in the catalog.

Target API: https://docs.ozon.ru/api/performance/.

POST, PUT and PATCH only; requires confirm_write=true.

Args:
    method: POST, PUT or PATCH.
    path: full path beginning with '/'.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `method` (string, required)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ozon_perf_delete_raw` (~192 tokens)

Delete data at ANY path, including paths not in the catalog.

Target API: https://docs.ozon.ru/api/performance/.

DELETE only. Both confirm_write=true and
i_understand_this_modifies_data=true are required.

Args:
    path: full path beginning with '/'.
    method: DELETE.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `i_understand_this_modifies_data` (boolean)
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ozon_perf_fetch_all` (~197 tokens)

Auto-paginate a read endpoint and return every row in one response.

Handles offset, last_id, cursor (Ozon v4/v5), page and WB lastChangeDate
styles. The array path is taken from the catalog automatically.

Args:
    operation_id: a read endpoint from the catalog.
    query / body / path_values: base parameters (cursor fields are managed).
    items_path: override the array path (default: the endpoint's own).
    limit: page size to request.
    max_items: hard cap to protect context (default 10000).
Returns JSON: {"ok", "items", "total_fetched", "pages_fetched", "truncated"}.

Input parameters:

- `body`
- `items_path`
- `limit` (integer)
- `max_items` (integer)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ozon_perf_list_cabinets` (~55 tokens)

List configured cabinets for this marketplace and which one is active.

Returns JSON: {"active": str|null, "cabinets": [names], "fields_needed": [...]}.
Secret values are never returned.

Output parameters:

- `result` (string)

### `ozon_perf_add_cabinet` (~220 tokens)

Add or update a cabinet (a named set of API credentials), from chat.

⚠️ This puts the key into the chat transcript — requires
i_understand_key_goes_to_chat=true. The terminal-free safe alternative is
the installer (install.py / double-click), where the key never enters chat.

Args:
    credentials: dict with the required fields for this service
        ({fields}). For Ozon: {{"client_id": "...", "api_key": "..."}};
        for WB: {{"token": "..."}}.
    name: optional label. If omitted, the cabinet is named after the real
        shop name fetched from the marketplace (falls back to "main").
    i_understand_key_goes_to_chat: must be true to proceed.
Saved to ~/.marketplace-mcp/cabinets.json (local, chmod 600), never echoed.

Input parameters:

- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)
- `name` (string)

Output parameters:

- `result` (string)

### `ozon_perf_set_key` (~223 tokens)

Change / rotate the API key from chat (e.g. the old one expired or
leaked).

⚠️ The key goes into the chat transcript — requires
i_understand_key_goes_to_chat=true. The safe, terminal-free alternative
is the installer, where the key never enters chat. Use a scoped key and
rotate it in the seller cabinet if it was exposed.

Args:
    credentials: dict with the required fields ({fields}).
    cabinet: which cabinet to update. Default: the active one (so "my key
        expired" just works). If there is none, the cabinet is named from
        the marketplace's shop name, else "main".
    i_understand_key_goes_to_chat: must be true to proceed.
On success the key is validated against the marketplace and the shop name
is reported. Saved locally (chmod 600), never echoed back.

Input parameters:

- `cabinet` (string)
- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)

Output parameters:

- `result` (string)

### `ozon_perf_use_cabinet` (~52 tokens)

Switch the active cabinet. Subsequent API calls use its credentials.

Args:
    name: the cabinet to activate (see ozon_perf_list_cabinets).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ozon_perf_remove_cabinet` (~44 tokens)

Delete a stored cabinet. If it was active, another becomes active.

Args:
    name: the cabinet to remove.

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ozon_perf_list_workflows` (~59 tokens)

List ready-made analytical workflows (recipes) for this marketplace.

        Returns JSON: [{name, category, when_to_use}]. Use {svc}_get_workflow
        to fetch the full step-by-step plan for one.

Output parameters:

- `result` (string)

### `ozon_perf_get_workflow` (~70 tokens)

Return the full plan for one workflow: ordered steps (each naming a
        catalog operation_id and why), interpretation guidance, and common
        mistakes to avoid.

        Args:
            name: workflow name (see {svc}_list_workflows).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ym_check_auth` (~54 tokens)

Check whether the required credentials are present in the environment.

Does NOT reveal secret values — only reports which variables are set.
Returns JSON: {"ready": bool, "missing": [str], "required": [str]}.

Output parameters:

- `result` (string)

### `ym_list_sections` (~20 tokens)

List API sections and how many catalog endpoints each contains.

Output parameters:

- `result` (string)

### `ym_get_section` (~58 tokens)

List all endpoints in one section.

Args:
    section: section name (see ym_list_sections), e.g. "statistics".
Returns JSON list of {operation_id, method, path, safety, summary}.

Input parameters:

- `section` (string, required)

Output parameters:

- `result` (string)

### `ym_search_methods` (~78 tokens)

Search the endpoint catalog by keyword (works in Russian and English).

Args:
    query: free text, e.g. "остатки", "stocks", "update price".
    limit: max results (1-50).
Returns JSON list of matching endpoints (best first).

Input parameters:

- `limit` (integer)
- `query` (string, required)

Output parameters:

- `result` (string)

### `ym_map` (~81 tokens)

The big picture: business entities this API covers and the go-to
methods for each. Call with no args to see the whole map ("you are
here"); pass entity="reviews" (or stocks/prices/orders/…) to list every
method of one entity. Use this before guessing — it orients you fast.

Input parameters:

- `entity` (string)

Output parameters:

- `result` (string)

### `ym_describe_method` (~49 tokens)

Return the full catalog record for one endpoint: method, host, path,
scope, safety level, pagination style, rate limit, params and doc URL.

Input parameters:

- `operation_id` (string, required)

Output parameters:

- `result` (string)

### `ym_call_method` (~161 tokens)

Execute one READ endpoint from the catalog by operation_id.

Target API: https://yandex.ru/dev/market/partner-api/doc/ru/.

Reads only: nothing here changes data, so it runs without confirmation.
To change data use ym_write_method, to delete use ym_delete_method.

Args:
    operation_id: id from the catalog (see ym_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body (a few read endpoints take one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ym_write_method` (~171 tokens)

Execute one WRITE endpoint from the catalog: create or update data.

Target API: https://yandex.ru/dev/market/partner-api/doc/ru/.

Requires confirm_write=true; nothing is sent without it. Irreversible
operations live in ym_delete_method, reads in ym_call_method.

Args:
    operation_id: id from the catalog (see ym_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ym_delete_method` (~194 tokens)

Execute one DESTRUCTIVE endpoint: deletes or irreversibly changes data.

Target API: https://yandex.ru/dev/market/partner-api/doc/ru/.

Both confirm_write=true and i_understand_this_modifies_data=true are
required; nothing is sent without both.

Args:
    operation_id: id from the catalog (see ym_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `i_understand_this_modifies_data` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ym_get_raw` (~180 tokens)

Read ANY endpoint by path, including ones missing from the catalog.

Target API: https://yandex.ru/dev/market/partner-api/doc/ru/.

Safe verbs only (GET, HEAD, OPTIONS). To change data use
ym_write_raw, to delete use ym_delete_raw.

Args:
    path: full path beginning with '/', e.g. "/v2/regions".
    method: safe verb, GET by default.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body (rare on reads; some APIs want one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `host`
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ym_write_raw` (~166 tokens)

Create or update data at ANY path, including paths not in the catalog.

Target API: https://yandex.ru/dev/market/partner-api/doc/ru/.

POST, PUT and PATCH only; requires confirm_write=true.

Args:
    method: POST, PUT or PATCH.
    path: full path beginning with '/'.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `method` (string, required)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ym_delete_raw` (~194 tokens)

Delete data at ANY path, including paths not in the catalog.

Target API: https://yandex.ru/dev/market/partner-api/doc/ru/.

DELETE only. Both confirm_write=true and
i_understand_this_modifies_data=true are required.

Args:
    path: full path beginning with '/'.
    method: DELETE.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `i_understand_this_modifies_data` (boolean)
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ym_fetch_all` (~195 tokens)

Auto-paginate a read endpoint and return every row in one response.

Handles offset, last_id, cursor (Ozon v4/v5), page and WB lastChangeDate
styles. The array path is taken from the catalog automatically.

Args:
    operation_id: a read endpoint from the catalog.
    query / body / path_values: base parameters (cursor fields are managed).
    items_path: override the array path (default: the endpoint's own).
    limit: page size to request.
    max_items: hard cap to protect context (default 10000).
Returns JSON: {"ok", "items", "total_fetched", "pages_fetched", "truncated"}.

Input parameters:

- `body`
- `items_path`
- `limit` (integer)
- `max_items` (integer)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ym_list_cabinets` (~53 tokens)

List configured cabinets for this marketplace and which one is active.

Returns JSON: {"active": str|null, "cabinets": [names], "fields_needed": [...]}.
Secret values are never returned.

Output parameters:

- `result` (string)

### `ym_add_cabinet` (~218 tokens)

Add or update a cabinet (a named set of API credentials), from chat.

⚠️ This puts the key into the chat transcript — requires
i_understand_key_goes_to_chat=true. The terminal-free safe alternative is
the installer (install.py / double-click), where the key never enters chat.

Args:
    credentials: dict with the required fields for this service
        ({fields}). For Ozon: {{"client_id": "...", "api_key": "..."}};
        for WB: {{"token": "..."}}.
    name: optional label. If omitted, the cabinet is named after the real
        shop name fetched from the marketplace (falls back to "main").
    i_understand_key_goes_to_chat: must be true to proceed.
Saved to ~/.marketplace-mcp/cabinets.json (local, chmod 600), never echoed.

Input parameters:

- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)
- `name` (string)

Output parameters:

- `result` (string)

### `ym_set_key` (~221 tokens)

Change / rotate the API key from chat (e.g. the old one expired or
leaked).

⚠️ The key goes into the chat transcript — requires
i_understand_key_goes_to_chat=true. The safe, terminal-free alternative
is the installer, where the key never enters chat. Use a scoped key and
rotate it in the seller cabinet if it was exposed.

Args:
    credentials: dict with the required fields ({fields}).
    cabinet: which cabinet to update. Default: the active one (so "my key
        expired" just works). If there is none, the cabinet is named from
        the marketplace's shop name, else "main".
    i_understand_key_goes_to_chat: must be true to proceed.
On success the key is validated against the marketplace and the shop name
is reported. Saved locally (chmod 600), never echoed back.

Input parameters:

- `cabinet` (string)
- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)

Output parameters:

- `result` (string)

### `ym_use_cabinet` (~48 tokens)

Switch the active cabinet. Subsequent API calls use its credentials.

Args:
    name: the cabinet to activate (see ym_list_cabinets).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ym_remove_cabinet` (~42 tokens)

Delete a stored cabinet. If it was active, another becomes active.

Args:
    name: the cabinet to remove.

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ym_list_workflows` (~57 tokens)

List ready-made analytical workflows (recipes) for this marketplace.

        Returns JSON: [{name, category, when_to_use}]. Use {svc}_get_workflow
        to fetch the full step-by-step plan for one.

Output parameters:

- `result` (string)

### `ym_get_workflow` (~68 tokens)

Return the full plan for one workflow: ordered steps (each naming a
        catalog operation_id and why), interpretation guidance, and common
        mistakes to avoid.

        Args:
            name: workflow name (see {svc}_list_workflows).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ym_get_campaigns` (~145 tokens)

List the seller's shops (кампании) with their campaignId and businessId.

    Call this first: nearly every other Yandex Market method needs a campaignId
    (магазин) or businessId (кабинет продавца). Both are in the response:
    campaigns[].id and campaigns[].business.id.

    Args:
        page_token: pageToken from a previous page (empty for the first page).
        limit: page size (<=100).
    Returns JSON: {"ok": true, "data": {"campaigns": [...], "paging": {...}}}.

Input parameters:

- `limit` (integer)
- `page_token` (string)

Output parameters:

- `result` (string)

### `ym_get_orders` (~215 tokens)

List orders of one shop (GET /v2/campaigns/{campaignId}/orders).

    Args:
        campaign_id: shop id from ym_get_campaigns.
        status: filter, e.g. PROCESSING | DELIVERY | PICKUP | DELIVERED |
            CANCELLED | UNPAID (comma-separated allowed). Empty = all.
        from_date: order creation date lower bound, DD-MM-YYYY (Yandex format).
        to_date: upper bound, DD-MM-YYYY.
        page_token: pageToken from a previous page.
        limit: page size (<=50).
    Returns JSON: {"ok": true, "data": {"orders": [...], "paging": {...}}}.
    For every order across pages use ym_fetch_all with ym_get_orders.

Input parameters:

- `campaign_id` (integer, required)
- `from_date` (string)
- `limit` (integer)
- `page_token` (string)
- `status` (string)
- `to_date` (string)

Output parameters:

- `result` (string)

### `ym_get_offers` (~154 tokens)

List the seller's offers (товары) with their Market card mapping
    (POST /v2/businesses/{businessId}/offer-mappings).

    Args:
        business_id: cabinet id (campaigns[].business.id).
        offer_ids: comma-separated offerId (SKU) filter; empty = all.
        page_token: pageToken from a previous page.
        limit: page size (<=200).
    Returns JSON: {"ok": true, "data": {"result": {"offerMappings": [...], "paging": {...}}}}.

Input parameters:

- `business_id` (integer, required)
- `limit` (integer)
- `offer_ids` (string)
- `page_token` (string)

Output parameters:

- `result` (string)

### `ym_get_stocks` (~173 tokens)

Stock per offer per warehouse for one shop, with optional turnover
    (POST /v2/campaigns/{campaignId}/offers/stocks).

    Args:
        campaign_id: shop id.
        offer_ids: comma-separated offerId filter; empty = all.
        with_turnover: also return turnover (оборачиваемость) per offer.
        page_token: pageToken from a previous page.
        limit: page size (<=200).
    Returns JSON: {"ok": true, "data": {"result": {"warehouses": [{"warehouseId", "offers": [...]}]}}}.

Input parameters:

- `campaign_id` (integer, required)
- `limit` (integer)
- `offer_ids` (string)
- `page_token` (string)
- `with_turnover` (boolean)

Output parameters:

- `result` (string)

### `ym_get_prices` (~132 tokens)

Base prices set for all shops of the cabinet
    (POST /v2/businesses/{businessId}/offer-prices).

    Args:
        business_id: cabinet id.
        offer_ids: comma-separated offerId filter; empty = all.
        page_token: pageToken from a previous page.
        limit: page size (<=200).
    Returns JSON with result.offers[].price {value, currencyId, discountBase, updatedAt}.

Input parameters:

- `business_id` (integer, required)
- `limit` (integer)
- `offer_ids` (string)
- `page_token` (string)

Output parameters:

- `result` (string)

### `ym_set_price` (~222 tokens)

Set the base price of ONE offer for all shops of the cabinet
    (POST /v2/businesses/{businessId}/offer-prices/updates). WRITE.

    Requires confirm_write=true. discount_base is the strikethrough price
    (must be higher than price); 0 = no discount shown.

    Args:
        business_id: cabinet id.
        offer_id: seller's SKU (offerId).
        price: new price, e.g. 1499.
        discount_base: pre-discount price, or 0 to clear.
        currency: RUR (default) — Yandex uses "RUR", not "RUB".
        confirm_write: must be true to send.
    Returns JSON: {"ok": true, "data": {"status": "OK"}} on success.

Input parameters:

- `business_id` (integer, required)
- `confirm_write` (boolean)
- `currency` (string)
- `discount_base` (number)
- `offer_id` (string, required)
- `price` (number, required)

Output parameters:

- `result` (string)

### `avito_check_auth` (~55 tokens)

Check whether the required credentials are present in the environment.

Does NOT reveal secret values — only reports which variables are set.
Returns JSON: {"ready": bool, "missing": [str], "required": [str]}.

Output parameters:

- `result` (string)

### `avito_list_sections` (~21 tokens)

List API sections and how many catalog endpoints each contains.

Output parameters:

- `result` (string)

### `avito_get_section` (~60 tokens)

List all endpoints in one section.

Args:
    section: section name (see avito_list_sections), e.g. "statistics".
Returns JSON list of {operation_id, method, path, safety, summary}.

Input parameters:

- `section` (string, required)

Output parameters:

- `result` (string)

### `avito_search_methods` (~79 tokens)

Search the endpoint catalog by keyword (works in Russian and English).

Args:
    query: free text, e.g. "остатки", "stocks", "update price".
    limit: max results (1-50).
Returns JSON list of matching endpoints (best first).

Input parameters:

- `limit` (integer)
- `query` (string, required)

Output parameters:

- `result` (string)

### `avito_map` (~82 tokens)

The big picture: business entities this API covers and the go-to
methods for each. Call with no args to see the whole map ("you are
here"); pass entity="reviews" (or stocks/prices/orders/…) to list every
method of one entity. Use this before guessing — it orients you fast.

Input parameters:

- `entity` (string)

Output parameters:

- `result` (string)

### `avito_describe_method` (~50 tokens)

Return the full catalog record for one endpoint: method, host, path,
scope, safety level, pagination style, rate limit, params and doc URL.

Input parameters:

- `operation_id` (string, required)

Output parameters:

- `result` (string)

### `avito_call_method` (~160 tokens)

Execute one READ endpoint from the catalog by operation_id.

Target API: https://developers.avito.ru/api-catalog.

Reads only: nothing here changes data, so it runs without confirmation.
To change data use avito_write_method, to delete use avito_delete_method.

Args:
    operation_id: id from the catalog (see avito_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body (a few read endpoints take one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `avito_write_method` (~170 tokens)

Execute one WRITE endpoint from the catalog: create or update data.

Target API: https://developers.avito.ru/api-catalog.

Requires confirm_write=true; nothing is sent without it. Irreversible
operations live in avito_delete_method, reads in avito_call_method.

Args:
    operation_id: id from the catalog (see avito_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `avito_delete_method` (~191 tokens)

Execute one DESTRUCTIVE endpoint: deletes or irreversibly changes data.

Target API: https://developers.avito.ru/api-catalog.

Both confirm_write=true and i_understand_this_modifies_data=true are
required; nothing is sent without both.

Args:
    operation_id: id from the catalog (see avito_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `i_understand_this_modifies_data` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `avito_get_raw` (~178 tokens)

Read ANY endpoint by path, including ones missing from the catalog.

Target API: https://developers.avito.ru/api-catalog.

Safe verbs only (GET, HEAD, OPTIONS). To change data use
avito_write_raw, to delete use avito_delete_raw.

Args:
    path: full path beginning with '/', e.g. "/core/v1/items".
    method: safe verb, GET by default.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body (rare on reads; some APIs want one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `host`
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `avito_write_raw` (~162 tokens)

Create or update data at ANY path, including paths not in the catalog.

Target API: https://developers.avito.ru/api-catalog.

POST, PUT and PATCH only; requires confirm_write=true.

Args:
    method: POST, PUT or PATCH.
    path: full path beginning with '/'.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `method` (string, required)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `avito_delete_raw` (~190 tokens)

Delete data at ANY path, including paths not in the catalog.

Target API: https://developers.avito.ru/api-catalog.

DELETE only. Both confirm_write=true and
i_understand_this_modifies_data=true are required.

Args:
    path: full path beginning with '/'.
    method: DELETE.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `i_understand_this_modifies_data` (boolean)
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `avito_fetch_all` (~196 tokens)

Auto-paginate a read endpoint and return every row in one response.

Handles offset, last_id, cursor (Ozon v4/v5), page and WB lastChangeDate
styles. The array path is taken from the catalog automatically.

Args:
    operation_id: a read endpoint from the catalog.
    query / body / path_values: base parameters (cursor fields are managed).
    items_path: override the array path (default: the endpoint's own).
    limit: page size to request.
    max_items: hard cap to protect context (default 10000).
Returns JSON: {"ok", "items", "total_fetched", "pages_fetched", "truncated"}.

Input parameters:

- `body`
- `items_path`
- `limit` (integer)
- `max_items` (integer)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `avito_list_cabinets` (~54 tokens)

List configured cabinets for this marketplace and which one is active.

Returns JSON: {"active": str|null, "cabinets": [names], "fields_needed": [...]}.
Secret values are never returned.

Output parameters:

- `result` (string)

### `avito_add_cabinet` (~219 tokens)

Add or update a cabinet (a named set of API credentials), from chat.

⚠️ This puts the key into the chat transcript — requires
i_understand_key_goes_to_chat=true. The terminal-free safe alternative is
the installer (install.py / double-click), where the key never enters chat.

Args:
    credentials: dict with the required fields for this service
        ({fields}). For Ozon: {{"client_id": "...", "api_key": "..."}};
        for WB: {{"token": "..."}}.
    name: optional label. If omitted, the cabinet is named after the real
        shop name fetched from the marketplace (falls back to "main").
    i_understand_key_goes_to_chat: must be true to proceed.
Saved to ~/.marketplace-mcp/cabinets.json (local, chmod 600), never echoed.

Input parameters:

- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)
- `name` (string)

Output parameters:

- `result` (string)

### `avito_set_key` (~222 tokens)

Change / rotate the API key from chat (e.g. the old one expired or
leaked).

⚠️ The key goes into the chat transcript — requires
i_understand_key_goes_to_chat=true. The safe, terminal-free alternative
is the installer, where the key never enters chat. Use a scoped key and
rotate it in the seller cabinet if it was exposed.

Args:
    credentials: dict with the required fields ({fields}).
    cabinet: which cabinet to update. Default: the active one (so "my key
        expired" just works). If there is none, the cabinet is named from
        the marketplace's shop name, else "main".
    i_understand_key_goes_to_chat: must be true to proceed.
On success the key is validated against the marketplace and the shop name
is reported. Saved locally (chmod 600), never echoed back.

Input parameters:

- `cabinet` (string)
- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)

Output parameters:

- `result` (string)

### `avito_use_cabinet` (~50 tokens)

Switch the active cabinet. Subsequent API calls use its credentials.

Args:
    name: the cabinet to activate (see avito_list_cabinets).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `avito_remove_cabinet` (~43 tokens)

Delete a stored cabinet. If it was active, another becomes active.

Args:
    name: the cabinet to remove.

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `avito_list_workflows` (~58 tokens)

List ready-made analytical workflows (recipes) for this marketplace.

        Returns JSON: [{name, category, when_to_use}]. Use {svc}_get_workflow
        to fetch the full step-by-step plan for one.

Output parameters:

- `result` (string)

### `avito_get_workflow` (~69 tokens)

Return the full plan for one workflow: ordered steps (each naming a
        catalog operation_id and why), interpretation guidance, and common
        mistakes to avoid.

        Args:
            name: workflow name (see {svc}_list_workflows).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `avito_whoami` (~69 tokens)

Authorized Avito account: id (needed as user_id in many methods), name,
    email, phone, profile_url. Also the cheapest way to verify the credentials.
    Returns JSON: {"ok": true, "data": {"id": ..., "name": ..., ...}}.

Output parameters:

- `result` (string)

### `avito_get_items` (~185 tokens)

List the seller's listings (объявления): status, category, url
    (GET /core/v1/items). Max 25 requests/min.

    Args:
        status: active | removed | old | blocked | rejected (comma-separated ok).
        category: Avito category id filter, 0 = all.
        updated_from: YYYY-MM-DD lower bound on the listing update date.
        page: 1-based page number.
        per_page: page size (<100).
    Returns JSON: {"ok": true, "data": {"meta": {...}, "resources": [...]}}.
    For all pages use avito_fetch_all with avito_get_items_info.

Input parameters:

- `category` (integer)
- `page` (integer)
- `per_page` (integer)
- `status` (string)
- `updated_from` (string)

Output parameters:

- `result` (string)

### `avito_get_orders` (~187 tokens)

Orders placed with Авито Доставка (GET /order-management/1/orders).
    Business (B2C) sellers only.

    Args:
        statuses: comma-separated filter: on_confirmation, ready_to_ship,
            in_transit, canceled, delivered, on_return, in_dispute, closed.
        date_from: unix timestamp — only orders created after it.
        page: 1-based page number.
        limit: page size (<=20).
    Returns JSON: {"ok": true, "data": {"orders": [...], "hasMore": bool}}.
    Each order has availableActions (confirm / reject / setTrackNumber …) and
    schedules (deadlines such as confirmTill, shipTill).

Input parameters:

- `date_from` (integer)
- `limit` (integer)
- `page` (integer)
- `statuses` (string)

Output parameters:

- `result` (string)

### `avito_get_stocks` (~92 tokens)

Stock per listing (POST /stock-management/1/info): quantity,
    is_unlimited, is_out_of_stock. Up to 500 ids per call.

    Args:
        item_ids: comma-separated Avito listing ids.
    Returns JSON: {"ok": true, "data": {"stocks": [{"item_id", "quantity", ...}]}}.

Input parameters:

- `item_ids` (string, required)

Output parameters:

- `result` (string)

### `avito_get_item_stats` (~144 tokens)

Views / contacts / favorites per listing per period
    (POST /stats/v1/accounts/{user_id}/items). Up to 200 ids, 270 days deep.

    Args:
        item_ids: comma-separated listing ids.
        date_from: YYYY-MM-DD (inclusive).
        date_to: YYYY-MM-DD (inclusive).
        period_grouping: day | week | month.
    Returns JSON with result.items[].stats[] {date, uniqViews, uniqContacts, uniqFavorites}.

Input parameters:

- `date_from` (string, required)
- `date_to` (string, required)
- `item_ids` (string, required)
- `period_grouping` (string)

Output parameters:

- `result` (string)

### `avito_get_reviews` (~115 tokens)

Published reviews on the seller with score, text, deal stage and the
    seller's answer (GET /ratings/v1/reviews). Use avito_get_ratings_info_v1
    via avito_call_method for the aggregate rating.

    Args:
        offset: pagination offset.
        limit: page size (<=50).
    Returns JSON: {"ok": true, "data": {"total": n, "reviews": [...]}}.

Input parameters:

- `limit` (integer)
- `offset` (integer)

Output parameters:

- `result` (string)

### `avito_get_chats` (~153 tokens)

Buyer chats (GET /messenger/v2/accounts/{user_id}/chats). Requires the
    Messenger API to be enabled on the seller's Avito plan.

    Args:
        unread_only: only chats with unread messages.
        item_ids: comma-separated listing ids to filter chats by.
        limit: page size (<=100).
        offset: pagination offset (<=1000).
    Returns JSON: {"ok": true, "data": {"chats": [{"id", "context", "last_message", "users"}]}}.

Input parameters:

- `item_ids` (string)
- `limit` (integer)
- `offset` (integer)
- `unread_only` (boolean)

Output parameters:

- `result` (string)

### `avito_get_balance` (~54 tokens)

Wallet balance: real money and bonuses (GET /core/v1/accounts/{user_id}/balance/).
    Returns JSON: {"ok": true, "data": {"real": ..., "bonus": ...}}.

Output parameters:

- `result` (string)

### `avito_update_price` (~134 tokens)

Set the price of ONE listing (POST /core/v1/items/{item_id}/update_price). WRITE.

    Requires confirm_write=true. Goods, spare parts, cars, real estate only;
    max 150 requests/min.

    Args:
        item_id: Avito listing id.
        price: new price in roubles (integer).
        confirm_write: must be true to send.
    Returns JSON: {"ok": true, "data": {"result": {"success": true}}}.

Input parameters:

- `confirm_write` (boolean)
- `item_id` (integer, required)
- `price` (integer, required)

Output parameters:

- `result` (string)

### `avito_update_stock` (~132 tokens)

Set the available quantity of ONE listing (PUT /stock-management/1/stocks). WRITE.

    Requires confirm_write=true. quantity 0 hides the "buy with delivery" button.

    Args:
        item_id: Avito listing id.
        quantity: units available (0..999999).
        confirm_write: must be true to send.
    Returns JSON: {"ok": true, "data": {"stocks": [{"item_id", "success", "errors"}]}}.

Input parameters:

- `confirm_write` (boolean)
- `item_id` (integer, required)
- `quantity` (integer, required)

Output parameters:

- `result` (string)

## Diagnostics

Captured diagnostic sections: Provenance. The full working is on the page: https://verifymcp.io/servers/ilyautov-marketplaces-mcp-ru/ghcr-io-ilyautov-marketplaces-mcp-ru-0-6-1#diagnostics

## Score history

- 2026-09-20: 37
- 2026-09-19: 37
- 2026-09-18: 37
- 2026-09-17: 37
- 2026-09-16: 37
- 2026-09-15: 37
- 2026-09-14: 37

## Common questions

### What is the Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… server?

Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… is listed in the public MCP registry as io.github.ilyautov/marketplaces-mcp-ru. Wildberries, Ozon, Yandex Market & Avito seller APIs for AI assistants: schema-driven, safety-gated. This page covers its container image (ghcr.io/ilyautov/marketplaces-mcp-ru:0.6.1).

### Is the Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… server safe to use?

Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… scores 37 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… server expose?

Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… exposes 126 tools: wb_check_auth, wb_list_sections, wb_get_section, wb_search_methods, wb_map, and 121 more. Their descriptions and schemas cost roughly 15,149 tokens of context every time the server is loaded.

### Is the Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… server still maintained?

Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… server under?

Marketplaces MCP (RU) — Wildberries, Ozon, Yandex Market… declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- Repository: https://github.com/ilyautov/marketplaces-mcp-ru
- Website: https://marketplaces-mcp-ru.aifrontier.tech/
- Changelog RSS feed: https://verifymcp.io/servers/ilyautov-marketplaces-mcp-ru/ghcr-io-ilyautov-marketplaces-mcp-ru-0-6-1.xml
- Changelog JSON feed: https://verifymcp.io/servers/ilyautov-marketplaces-mcp-ru/ghcr-io-ilyautov-marketplaces-mcp-ru-0-6-1.json
- HTML version of this page: https://verifymcp.io/servers/ilyautov-marketplaces-mcp-ru/ghcr-io-ilyautov-marketplaces-mcp-ru-0-6-1