# MoySklad MCP (RU) (pypi · moysklad-mcp-ru)

MoySklad JSON API 1.2 in your AI assistant — schema-driven, safety-gated document writes.

- Trust score: 69/100 (medium)
- Change this week: +2
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-20

## Components

- pypi · `moysklad-mcp-ru`: 69/100 (this document), [markdown](https://verifymcp.io/servers/ilyautov-moysklad-mcp-ru/moysklad-mcp-ru.md), [page](https://verifymcp.io/servers/ilyautov-moysklad-mcp-ru/moysklad-mcp-ru)

## Channel facts

- Registry: `pypi`
- Package: `moysklad-mcp-ru`
- Version: `0.2.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-20.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - Runs setuptools.build_meta at install time, a recognised native-build step with no shell scripting around it.
  - 0 of 30 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 35/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - License check failed: no license is declared.
  - Actively maintained (last published 5 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 4660 tokens (~129/item across 36 items; 36 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 30/100
  - Stability check failed: the tool surface changed between 0.1.2 and 0.2.0: 1 tool removals, 0 breaking changes, 5 additions.
- **Tool Coverage**: 71/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 96/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 5 of 6 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "ms_call_method" implies "execute" and declares readOnlyHint instead, contradicting what its own name says it does.
  - An AI judge read all 36 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the MoySklad MCP (RU) server?

MoySklad MCP (RU) runs locally as a PyPI package, launched with uvx moysklad-mcp-ru. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add ilyautov-moysklad-mcp-ru -- uvx moysklad-mcp-ru
```

### Cursor

```json
{
  "mcpServers": {
    "ilyautov-moysklad-mcp-ru": {
      "command": "uvx",
      "args": [
        "moysklad-mcp-ru"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "ilyautov-moysklad-mcp-ru": {
      "command": "uvx",
      "args": [
        "moysklad-mcp-ru"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add ilyautov-moysklad-mcp-ru -- uvx moysklad-mcp-ru
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ilyautov-moysklad-mcp-ru": {
      "type": "local",
      "command": [
        "uvx",
        "moysklad-mcp-ru"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ilyautov-moysklad-mcp-ru --command uvx --arg moysklad-mcp-ru
```

### Hermes

```yaml
mcp_servers:
  ilyautov-moysklad-mcp-ru:
    command: "uvx"
    args: ["moysklad-mcp-ru"]
```

### Netclaw

```json
{
  "McpServers": {
    "ilyautov-moysklad-mcp-ru": {
      "Transport": "stdio",
      "Command": "uvx",
      "Arguments": [
        "moysklad-mcp-ru"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add ilyautov-moysklad-mcp-ru -t stdio -c uvx -a moysklad-mcp-ru
```

### Other

```json
{
  "mcpServers": {
    "ilyautov-moysklad-mcp-ru": {
      "command": "uvx",
      "args": [
        "moysklad-mcp-ru"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-18 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 24.

### 2026-09-16 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 14 to 17.

### 2026-09-15 (score 67, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-09-14 (score 52, −15)

- [security regression] Malware scan: pass → unverified
- [security regression] Stability: 0.10 → fail
- [functional regression] Schema quality: 3978 → 4660
- [functional] Schema quality: excellent → good
- [functional] Destructive annotations: 5 of 6 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "ms_call_method" implies "execute" and declares readOnlyHint instead, contradicting what its own name says it does.
- [functional] Package version: 0.1.3 → 0.2.0

### 2026-09-13 (score 67, +30)

- [security improvement] Injection markers: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Stability: unverified → 0.10
- [functional improvement] MCP protocol: unverified → pass

### 2026-09-12 (score 37, −29)

- [security regression] Tool safety: pass → unverified
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified
- [functional] Package version: 0.1.2 → 0.1.3

### 2026-09-11 (score 66, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-09-10 (score 51)

First indexed and scored.

## MCP tools (36)

### `ms_check_auth` (~54 tokens)

Check whether the required credentials are present in the environment.

Does NOT reveal secret values — only reports which variables are set.
Returns JSON: {"ready": bool, "missing": [str], "required": [str]}.

Output parameters:

- `result` (string)

### `ms_list_sections` (~20 tokens)

List API sections and how many catalog endpoints each contains.

Output parameters:

- `result` (string)

### `ms_get_section` (~58 tokens)

List all endpoints in one section.

Args:
    section: section name (see ms_list_sections), e.g. "statistics".
Returns JSON list of {operation_id, method, path, safety, summary}.

Input parameters:

- `section` (string, required)

Output parameters:

- `result` (string)

### `ms_search_methods` (~78 tokens)

Search the endpoint catalog by keyword (works in Russian and English).

Args:
    query: free text, e.g. "остатки", "stocks", "update price".
    limit: max results (1-50).
Returns JSON list of matching endpoints (best first).

Input parameters:

- `limit` (integer)
- `query` (string, required)

Output parameters:

- `result` (string)

### `ms_map` (~81 tokens)

The big picture: business entities this API covers and the go-to
methods for each. Call with no args to see the whole map ("you are
here"); pass entity="reviews" (or stocks/prices/orders/…) to list every
method of one entity. Use this before guessing — it orients you fast.

Input parameters:

- `entity` (string)

Output parameters:

- `result` (string)

### `ms_describe_method` (~49 tokens)

Return the full catalog record for one endpoint: method, host, path,
scope, safety level, pagination style, rate limit, params and doc URL.

Input parameters:

- `operation_id` (string, required)

Output parameters:

- `result` (string)

### `ms_call_method` (~163 tokens)

Execute one READ endpoint from the catalog by operation_id.

Target API: https://dev.moysklad.ru/doc/api/remap/1.2/.

Reads only: nothing here changes data, so it runs without confirmation.
To change data use ms_write_method, to delete use ms_delete_method.

Args:
    operation_id: id from the catalog (see ms_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body (a few read endpoints take one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ms_write_method` (~173 tokens)

Execute one WRITE endpoint from the catalog: create or update data.

Target API: https://dev.moysklad.ru/doc/api/remap/1.2/.

Requires confirm_write=true; nothing is sent without it. Irreversible
operations live in ms_delete_method, reads in ms_call_method.

Args:
    operation_id: id from the catalog (see ms_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ms_delete_method` (~196 tokens)

Execute one DESTRUCTIVE endpoint: deletes or irreversibly changes data.

Target API: https://dev.moysklad.ru/doc/api/remap/1.2/.

Both confirm_write=true and i_understand_this_modifies_data=true are
required; nothing is sent without both.

Args:
    operation_id: id from the catalog (see ms_search_methods).
    path_values: values for {placeholders} in the path.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `i_understand_this_modifies_data` (boolean)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ms_get_raw` (~187 tokens)

Read ANY endpoint by path, including ones missing from the catalog.

Target API: https://dev.moysklad.ru/doc/api/remap/1.2/.

Safe verbs only (GET, HEAD, OPTIONS). To change data use
ms_write_raw, to delete use ms_delete_raw.

Args:
    path: full path beginning with '/', e.g. "/api/remap/1.2/async".
    method: safe verb, GET by default.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body (rare on reads; some APIs want one).
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `host`
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ms_write_raw` (~168 tokens)

Create or update data at ANY path, including paths not in the catalog.

Target API: https://dev.moysklad.ru/doc/api/remap/1.2/.

POST, PUT and PATCH only; requires confirm_write=true.

Args:
    method: POST, PUT or PATCH.
    path: full path beginning with '/'.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `method` (string, required)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ms_delete_raw` (~196 tokens)

Delete data at ANY path, including paths not in the catalog.

Target API: https://dev.moysklad.ru/doc/api/remap/1.2/.

DELETE only. Both confirm_write=true and
i_understand_this_modifies_data=true are required.

Args:
    path: full path beginning with '/'.
    method: DELETE.
    host: host override; defaults to the service's default host.
    query: query-string parameters.
    body: JSON request body.
    confirm_write: must be true.
    i_understand_this_modifies_data: must be true.
Returns JSON: {"ok": true, "status", "data"} or the error envelope.

Input parameters:

- `body`
- `confirm_write` (boolean)
- `host`
- `i_understand_this_modifies_data` (boolean)
- `method` (string)
- `path` (string, required)
- `query`

Output parameters:

- `result` (string)

### `ms_fetch_all` (~195 tokens)

Auto-paginate a read endpoint and return every row in one response.

Handles offset, last_id, cursor (Ozon v4/v5), page and WB lastChangeDate
styles. The array path is taken from the catalog automatically.

Args:
    operation_id: a read endpoint from the catalog.
    query / body / path_values: base parameters (cursor fields are managed).
    items_path: override the array path (default: the endpoint's own).
    limit: page size to request.
    max_items: hard cap to protect context (default 10000).
Returns JSON: {"ok", "items", "total_fetched", "pages_fetched", "truncated"}.

Input parameters:

- `body`
- `items_path`
- `limit` (integer)
- `max_items` (integer)
- `operation_id` (string, required)
- `path_values`
- `query`

Output parameters:

- `result` (string)

### `ms_list_cabinets` (~53 tokens)

List configured cabinets for this marketplace and which one is active.

Returns JSON: {"active": str|null, "cabinets": [names], "fields_needed": [...]}.
Secret values are never returned.

Output parameters:

- `result` (string)

### `ms_add_cabinet` (~218 tokens)

Add or update a cabinet (a named set of API credentials), from chat.

⚠️ This puts the key into the chat transcript — requires
i_understand_key_goes_to_chat=true. The terminal-free safe alternative is
the installer (install.py / double-click), where the key never enters chat.

Args:
    credentials: dict with the required fields for this service
        ({fields}). For Ozon: {{"client_id": "...", "api_key": "..."}};
        for WB: {{"token": "..."}}.
    name: optional label. If omitted, the cabinet is named after the real
        shop name fetched from the marketplace (falls back to "main").
    i_understand_key_goes_to_chat: must be true to proceed.
Saved to ~/.marketplace-mcp/cabinets.json (local, chmod 600), never echoed.

Input parameters:

- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)
- `name` (string)

Output parameters:

- `result` (string)

### `ms_set_key` (~221 tokens)

Change / rotate the API key from chat (e.g. the old one expired or
leaked).

⚠️ The key goes into the chat transcript — requires
i_understand_key_goes_to_chat=true. The safe, terminal-free alternative
is the installer, where the key never enters chat. Use a scoped key and
rotate it in the seller cabinet if it was exposed.

Args:
    credentials: dict with the required fields ({fields}).
    cabinet: which cabinet to update. Default: the active one (so "my key
        expired" just works). If there is none, the cabinet is named from
        the marketplace's shop name, else "main".
    i_understand_key_goes_to_chat: must be true to proceed.
On success the key is validated against the marketplace and the shop name
is reported. Saved locally (chmod 600), never echoed back.

Input parameters:

- `cabinet` (string)
- `credentials` (object, required)
- `i_understand_key_goes_to_chat` (boolean)

Output parameters:

- `result` (string)

### `ms_use_cabinet` (~48 tokens)

Switch the active cabinet. Subsequent API calls use its credentials.

Args:
    name: the cabinet to activate (see ms_list_cabinets).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ms_remove_cabinet` (~42 tokens)

Delete a stored cabinet. If it was active, another becomes active.

Args:
    name: the cabinet to remove.

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ms_list_workflows` (~54 tokens)

List ready-made analytical workflows (recipes) for this marketplace.

Returns JSON: [{name, category, when_to_use}]. Use {svc}_get_workflow
to fetch the full step-by-step plan for one.

Output parameters:

- `result` (string)

### `ms_get_workflow` (~65 tokens)

Return the full plan for one workflow: ordered steps (each naming a
catalog operation_id and why), interpretation guidance, and common
mistakes to avoid.

Args:
    name: workflow name (see {svc}_list_workflows).

Input parameters:

- `name` (string, required)

Output parameters:

- `result` (string)

### `ms_get_stock` (~119 tokens)

Current stock snapshot, grouped by product (fast /report/stock/all/current).

Args:
    stock_type: quantity | freeStock | reserve | inTransit | stock. Default quantity.
    include_zero: include zero-stock lines (adds include=zeroLines).
Returns JSON: {"ok": true, "data": [ {assortmentId, <stock_type>}, ... ]}.
No money in this report, so values are returned as-is (quantities).

Input parameters:

- `include_zero` (boolean)
- `stock_type` (string)

Output parameters:

- `result` (string)

### `ms_get_products` (~148 tokens)

List products/services/bundles (assortment) with prices and stock.

Args:
    limit: page size, max 1000.
    offset: pagination offset.
    filter: optional MoySklad filter expression (e.g. "archived=false").
    rubles: convert kopeck money fields to rubles (default true).
Returns JSON: {"ok": true, "data": {"meta", "rows": [ products ]}}.
Sale prices and buy price are kopecks in the raw API; rubles=true converts them.

Input parameters:

- `filter`
- `limit` (integer)
- `offset` (integer)
- `rubles` (boolean)

Output parameters:

- `result` (string)

### `ms_get_orders` (~140 tokens)

List customer orders. Document total is "sum" (kopecks in raw API).

Args:
    limit: page size, max 1000.
    offset: pagination offset.
    filter: optional MoySklad filter (e.g. "moment>=2026-06-01 00:00:00").
    rubles: convert "sum" and money fields to rubles (default true).
Returns JSON: {"ok": true, "data": {"meta", "rows": [ orders ]}}.

Input parameters:

- `filter`
- `limit` (integer)
- `offset` (integer)
- `rubles` (boolean)

Output parameters:

- `result` (string)

### `ms_get_profit` (~135 tokens)

Profitability by product (sale, cost, profit, margin). Money in kopecks.

Args:
    moment_from / moment_to: period bounds "YYYY-MM-DD HH:MM:SS" (report needs them).
    limit/offset: pagination (rows under "rows"). rubles: kopecks→rubles (default true).
Returns JSON: {"ok": true, "data": {"meta", "rows": [ ... ]}}.

Input parameters:

- `limit` (integer)
- `moment_from`
- `moment_to`
- `offset` (integer)
- `rubles` (boolean)

Output parameters:

- `result` (string)

### `ms_get_money` (~97 tokens)

Cash balances by account/cashbox (kopecks). For cashflow over time use
ms_call_method('ms_get_report_money_plotseries', ...) from the map.

Args:
    rubles: convert kopeck balances to rubles (default true).
Returns JSON: {"ok": true, "data": {"meta", "rows": [ {account, balance, ...} ]}}.

Input parameters:

- `rubles` (boolean)

Output parameters:

- `result` (string)

### `ms_get_turnover` (~133 tokens)

Turnover by product: opening/income/outcome/closing in qty and money (kopecks).

Args:
    moment_from / moment_to: period bounds "YYYY-MM-DD HH:MM:SS" (required by the report).
    limit/offset: pagination. rubles: kopecks→rubles (default true).
Returns JSON: {"ok": true, "data": {"meta", "rows": [ ... ]}}.

Input parameters:

- `limit` (integer)
- `moment_from`
- `moment_to`
- `offset` (integer)
- `rubles` (boolean)

Output parameters:

- `result` (string)

### `ms_get_counterparties` (~118 tokens)

Counterparties (customers and suppliers). Balance fields in kopecks.

Args:
    limit/offset: pagination. filter: MoySklad filter (e.g. "name~ООО").
    rubles: convert kopeck balance fields to rubles (default true).
Returns JSON: {"ok": true, "data": {"meta", "rows": [ counterparties ]}}.

Input parameters:

- `filter`
- `limit` (integer)
- `offset` (integer)
- `rubles` (boolean)

Output parameters:

- `result` (string)

### `ms_get_stores` (~64 tokens)

Warehouses/stores (small dictionary). No money fields.

Returns JSON: {"ok": true, "data": {"meta", "rows": [ {name, id, ...} ]}}.

Input parameters:

- `limit` (integer)
- `offset` (integer)

Output parameters:

- `result` (string)

### `ms_get_documents` (~162 tokens)

List a role document by type. Document total in "sum" (kopecks).

Args:
    doc_type: one of demand | supply | purchaseorder | invoiceout |
        invoicein | salesreturn | purchasereturn.
    limit/offset: pagination. filter: MoySklad filter (e.g. "moment>=2026-06-01 00:00:00").
    rubles: convert "sum" and money fields to rubles (default true).
Returns JSON: {"ok": true, "data": {"meta", "rows": [ documents ]}}.

Input parameters:

- `doc_type` (string, required)
- `filter`
- `limit` (integer)
- `offset` (integer)
- `rubles` (boolean)

Output parameters:

- `result` (string)

### `ms_ping` (~73 tokens)

Live connectivity + auth check: GET assortment?limit=1.

Returns {"ok": true, "status": 200, "data": {...}} when the token works, or
the canonical error envelope (auth/forbidden/network/...) otherwise. Use this
on the cabinet to confirm the token before anything else.

Output parameters:

- `result` (string)

### `ms_build_purchaseorder` (~216 tokens)

PREVIEW a purchase order: resolve names to refs and show the EXACT body
ms_create_purchaseorder would send (money already kopecks). Performs READS to
resolve names; sends NO write. Inspect the body/summary before creating.

Args:
    agent: supplier counterparty name (поставщик) — required.
    organization: own legal entity; omit to auto-use the only one on the cabinet.
    store: warehouse name (optional).
    positions: list of {"product": name, "quantity": n, "price": rubles,
        optional "discount" %, "vat" %}.
    moment/name/description: optional fields. moment is "YYYY-MM-DD HH:MM:SS".
Returns {"ok": true, "body", "resolved", "summary"} or an error envelope.

Input parameters:

- `agent` (string, required)
- `description`
- `moment`
- `name`
- `organization` (string)
- `positions`
- `store` (string)

Output parameters:

- `result` (string)

### `ms_create_purchaseorder` (~152 tokens)

Create a purchase order as a DRAFT (applicable=false — not posted, moves
nothing). WRITE — requires confirm_write=true. Posting is separate
(ms_post_document). Writes also require MOYSKLAD_ALLOW_WRITE=1 (off by default).

Args: same as ms_build_purchaseorder, plus confirm_write.
Returns the created document envelope {"ok": true, "data": {... "id" ...}},
or the guard/gate error (nothing sent).

Input parameters:

- `agent` (string, required)
- `confirm_write` (boolean)
- `description`
- `moment`
- `name`
- `organization` (string)
- `positions`
- `store` (string)

Output parameters:

- `result` (string)

### `ms_build_document` (~270 tokens)

PREVIEW any role document: resolve names to refs and show the EXACT body
ms_create_document would send (money already kopecks). READS only; no write.

Args:
    doc_type: one of demand | supply | purchaseorder | invoiceout |
        invoicein | salesreturn | purchasereturn.
    agent: counterparty name — supplier for supply/invoicein/purchasereturn/
        purchaseorder, customer for demand/invoiceout/salesreturn.
    organization: own legal entity; omit to auto-use the only one on the cabinet.
    store: warehouse name. supply/demand move stock, so a store is expected;
        optional for the others.
    positions: list of {"product": name, "quantity": n, "price": rubles,
        optional "discount" %, "vat" %}.
    moment/name/description: optional. moment is "YYYY-MM-DD HH:MM:SS".
Returns {"ok": true, "doc_type", "body", "resolved", "summary"} or an error.

Input parameters:

- `agent` (string, required)
- `description`
- `doc_type` (string, required)
- `moment`
- `name`
- `organization` (string)
- `positions`
- `store` (string)

Output parameters:

- `result` (string)

### `ms_create_document` (~229 tokens)

Create ANY role document as a DRAFT (applicable=false — not posted, moves
nothing). WRITE — requires confirm_write=true AND MOYSKLAD_ALLOW_WRITE=1.
Posting is a separate destructive step (ms_post_document). One body shape fits
every order-like document (live-verified 2026-06-26 on all 6 types).

Args:
    doc_type: one of demand | supply | purchaseorder | invoiceout |
        invoicein | salesreturn | purchasereturn.
    agent / organization / store / positions / moment / name / description:
        same as ms_build_document.
    confirm_write: required (write gate).
Returns the created document envelope {"ok": true, "data": {... "id" ...}},
or the guard/gate/validation error (nothing sent).

Input parameters:

- `agent` (string, required)
- `confirm_write` (boolean)
- `description`
- `doc_type` (string, required)
- `moment`
- `name`
- `organization` (string)
- `positions`
- `store` (string)

Output parameters:

- `result` (string)

### `ms_post_document` (~156 tokens)

POST / провести a document: sets applicable=true, which MOVES STOCK AND
MONEY in the books. DESTRUCTIVE — requires confirm_write=true AND
i_understand_this_modifies_data=true. Separate from creation on purpose.

Args:
    doc_type: one of demand|supply|purchaseorder|invoiceout|invoicein|
        salesreturn|purchasereturn.
    doc_id: document id (the "id" field returned by create).
Returns the updated document envelope, or the guard/gate error (nothing sent).

Input parameters:

- `confirm_write` (boolean)
- `doc_id` (string, required)
- `doc_type` (string, required)
- `i_understand_this_modifies_data` (boolean)

Output parameters:

- `result` (string)

### `ms_delete_document` (~129 tokens)

DELETE a document — e.g. remove a test draft to clean up. DESTRUCTIVE —
requires both confirmations.

Args:
    doc_type: one of demand|supply|purchaseorder|invoiceout|invoicein|
        salesreturn|purchasereturn.
    doc_id: document id.
Returns {"ok": true, "status": 200} on success, or the guard/gate error.

Input parameters:

- `confirm_write` (boolean)
- `doc_id` (string, required)
- `doc_type` (string, required)
- `i_understand_this_modifies_data` (boolean)

Output parameters:

- `result` (string)

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Dependencies. The full working is on the page: https://verifymcp.io/servers/ilyautov-moysklad-mcp-ru/moysklad-mcp-ru#diagnostics

## Score history

- 2026-09-20: 69
- 2026-09-19: 69
- 2026-09-18: 69
- 2026-09-17: 68
- 2026-09-16: 68
- 2026-09-15: 67
- 2026-09-14: 52
- 2026-09-13: 67
- 2026-09-12: 37
- 2026-09-11: 66
- 2026-09-10: 51

## Common questions

### What is the MoySklad MCP (RU) server?

MoySklad MCP (RU) is listed in the public MCP registry as io.github.ilyautov/moysklad-mcp-ru. MoySklad JSON API 1.2 in your AI assistant, schema-driven, safety-gated document writes. This page covers its PyPI package (moysklad-mcp-ru).

### Is the MoySklad MCP (RU) server safe to use?

MoySklad MCP (RU) scores 69 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the MoySklad MCP (RU) server expose?

MoySklad MCP (RU) exposes 36 tools: ms_check_auth, ms_list_sections, ms_get_section, ms_search_methods, ms_map, and 31 more. Their descriptions and schemas cost roughly 4,660 tokens of context every time the server is loaded.

### Is the MoySklad MCP (RU) server still maintained?

MoySklad MCP (RU) is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- PyPI project: https://pypi.org/project/moysklad-mcp-ru/
- Socket report: https://socket.dev/pypi/package/moysklad-mcp-ru
- Repository: https://github.com/ilyautov/moysklad-mcp-ru
- Website: https://moysklad-mcp-ru.aifrontier.tech/
- Changelog RSS feed: https://verifymcp.io/servers/ilyautov-moysklad-mcp-ru/moysklad-mcp-ru.xml
- Changelog JSON feed: https://verifymcp.io/servers/ilyautov-moysklad-mcp-ru/moysklad-mcp-ru.json
- HTML version of this page: https://verifymcp.io/servers/ilyautov-moysklad-mcp-ru/moysklad-mcp-ru