willmehr
NPM · WILLMEHR · SCANNED SEP 20
Search willhaben.at for second-hand listings and rank the underpriced ones
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 107 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 18 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability71
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1239 tokens (~154/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management63
- Stability observed for 19 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the willmehr MCP server?
willmehr runs locally as an npm package, launched with npx -y willmehr. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · willmehr
claude mcp add taneron-willmehr -- npx -y willmehr
{
"mcpServers": {
"taneron-willmehr": {
"command": "npx",
"args": [
"-y",
"willmehr"
]
}
}
} {
"servers": {
"taneron-willmehr": {
"command": "npx",
"args": [
"-y",
"willmehr"
]
}
}
} codex mcp add taneron-willmehr -- npx -y willmehr
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"taneron-willmehr": {
"type": "local",
"command": [
"npx",
"-y",
"willmehr"
],
"enabled": true
}
}
} openclaw mcp add taneron-willmehr --command npx --arg -y --arg willmehr
mcp_servers:
taneron-willmehr:
command: "npx"
args: ["-y", "willmehr"] {
"McpServers": {
"taneron-willmehr": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"willmehr"
]
}
}
} assistant mcp add taneron-willmehr -t stdio -c npx -a -y willmehr
{
"mcpServers": {
"taneron-willmehr": {
"command": "npx",
"args": [
"-y",
"willmehr"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Sept 26 +4
- Stability: unverified → 0.30 ▲ functional
- 1 Sept 26 69
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/willmehr@0.1.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 107 packages
| Packages resolved | 107 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
willhaben_discover_filters Discover available filters and category ids ~238
Return the filter dimensions willhaben offers for a given query, with the opaque numeric ids each value maps to and a hit count per value. Category, brand and size filters only appear once a query is narrow enough to imply a category, so call this before filtering on categoryId or treeAttributes.
| Name | Type | Req | Description |
|---|---|---|---|
| categoryId | integer | – | Category id (ATTRIBUTE_TREE). Use willhaben_discover_filters to find one. |
| condition | array | – | Item condition; multiple values are OR-ed |
| keyword | string | – | Free-text search, e.g. 'thinkpad t480' |
| payliveryOnly | boolean | – | Only ads with buyer protection and shipping (PayLivery) |
| priceFrom | integer | – | Minimum price in EUR |
| priceTo | integer | – | Maximum price in EUR |
| publishedWithinDays | integer | – | Only ads newer than N days |
| sellerType | string | – | Private sellers are usually where the bargains are |
| states | array | – | Austrian states to restrict to |
| treeAttributes | array | – | Extra facet ids (brand, size, ...) from willhaben_discover_filters |
No output schema declared.
No examples provided.
willhaben_find_deals Find underpriced listings ~392
Sample the market for a query, build a price distribution, and return the listings priced furthest below the median. Each result carries its discount, price percentile, age in hours, and a flag for prices so low they suggest a placeholder or scam. This is the main tool for sale hunting. IMPORTANT: the median is only meaningful if the query describes ONE kind of item. willhaben's keyword matching is loose, so a broad query like 'thinkpad' mixes laptops with chargers and docks and the resulting 'discounts' are meaningless. Narrow the query with categoryId (from willhaben_discover_filters), a specific model, and a priceFrom floor before trusting the ranking.
| Name | Type | Req | Description |
|---|---|---|---|
| categoryId | integer | – | Category id (ATTRIBUTE_TREE). Use willhaben_discover_filters to find one. |
| condition | array | – | Item condition; multiple values are OR-ed |
| keyword | string | – | Free-text search, e.g. 'thinkpad t480' |
| maxAgeHours | number | – | Only listings published within this many hours — use for sniping |
| maxResults | integer | – | Cap on deals returned |
| minDiscount | number | – | Minimum fraction below median to qualify. Default 0.25. |
| payliveryOnly | boolean | – | Only ads with buyer protection and shipping (PayLivery) |
| priceFrom | integer | – | Minimum price in EUR |
| priceTo | integer | – | Maximum price in EUR |
| publishedWithinDays | integer | – | Only ads newer than N days |
| sampleLimit | integer | – | Listings to sample before ranking. Default 200; more is steadier but slower. |
| sellerType | string | – | Private sellers are usually where the bargains are |
| states | array | – | Austrian states to restrict to |
| treeAttributes | array | – | Extra facet ids (brand, size, ...) from willhaben_discover_filters |
No output schema declared.
No examples provided.
willhaben_get_ad Get full ad detail ~85
Fetch the complete detail for one ad: full description text, all images, exact location, seller trust signals (member since, active ad count) and category-specific attributes. Accepts an ad id, a willhaben URL, or a seopath.
| Name | Type | Req | Description |
|---|---|---|---|
| ad | string | yes | Ad id (e.g. '1853265735') or full willhaben ad URL |
No output schema declared.
No examples provided.
willhaben_my_alert_count Count my active search alerts ~26
Number of saved searches with alerts enabled. Requires WILLHABEN_COOKIE.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
willhaben_my_conversations List my chat conversations ~39
Return recent buyer/seller conversations with their last message. Requires WILLHABEN_COOKIE.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Default 20 |
No output schema declared.
No examples provided.
willhaben_my_profile Get my willhaben profile ~42
Return the logged-in account's profile. Requires WILLHABEN_COOKIE. Also the way to get the numeric user id that willhaben_my_watchlist needs.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
willhaben_my_watchlist List my saved ads ~45
Return the ads saved to the account's watchlist. Requires WILLHABEN_COOKIE.
| Name | Type | Req | Description |
|---|---|---|---|
| userId | string | yes | Numeric user id from willhaben_my_profile |
No output schema declared.
No examples provided.
willhaben_search Search willhaben listings ~258
Search the willhaben.at marketplace (Kaufen & Verkaufen). Returns normalized listings with price, location, seller type and timestamps. Use this for ordinary lookups; use willhaben_find_deals when the goal is to spot underpriced items.
| Name | Type | Req | Description |
|---|---|---|---|
| categoryId | integer | – | Category id (ATTRIBUTE_TREE). Use willhaben_discover_filters to find one. |
| condition | array | – | Item condition; multiple values are OR-ed |
| keyword | string | – | Free-text search, e.g. 'thinkpad t480' |
| limit | integer | – | How many listings to return; pages automatically. Default 30. |
| payliveryOnly | boolean | – | Only ads with buyer protection and shipping (PayLivery) |
| priceFrom | integer | – | Minimum price in EUR |
| priceTo | integer | – | Maximum price in EUR |
| publishedWithinDays | integer | – | Only ads newer than N days |
| sellerType | string | – | Private sellers are usually where the bargains are |
| sort | string | – | Result ordering; defaults to newest |
| states | array | – | Austrian states to restrict to |
| treeAttributes | array | – | Extra facet ids (brand, size, ...) from willhaben_discover_filters |
No output schema declared.
No examples provided.
What is the willmehr MCP server?
willmehr is an MCP server listed in the public MCP registry as io.github.taneron/willmehr. Search willhaben.at for second-hand listings and rank the underpriced ones. This page covers its npm package (willmehr).
Is the willmehr MCP server safe to use?
willmehr scores 78 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the willmehr MCP server expose?
willmehr exposes 8 tools: willhaben_search, willhaben_get_ad, willhaben_find_deals, willhaben_discover_filters, willhaben_my_profile, and 3 more. Their descriptions and schemas cost roughly 1,125 tokens of context every time the server is loaded.
Is the willmehr MCP server still maintained?
willmehr is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the willmehr MCP server under?
willmehr declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.