Search / io.github.tspicer/amazon_ads_mcp
amazon_ads_mcp
L0· runs locallyAmazon Ads API MCP server for Amazon Advertising API
v0.2.4 · active · repository · descriptor JSON · versions
Search / io.github.tspicer/amazon_ads_mcp
L0· runs locallyAmazon Ads API MCP server for Amazon Advertising API
v0.2.4 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"amazon_ads_mcp": {
"command": "uvx",
"args": [
"amazon-ads-mcp==0.2.4"
],
"env": {
"AMAZON_AD_API_CLIENT_SECRET": "${AMAZON_AD_API_CLIENT_SECRET}",
"AMAZON_AD_API_REFRESH_TOKEN": "${AMAZON_AD_API_REFRESH_TOKEN}",
"OPENBRIDGE_REFRESH_TOKEN": "${OPENBRIDGE_REFRESH_TOKEN}",
"OPENBRIDGE_API_KEY": "${OPENBRIDGE_API_KEY}",
"AMAZON_ADS_DOWNLOAD_AUTH_TOKEN": "${AMAZON_ADS_DOWNLOAD_AUTH_TOKEN}"
}
}
}
}claude mcp add amazon_ads_mcp -e "AMAZON_AD_API_CLIENT_SECRET=${AMAZON_AD_API_CLIENT_SECRET}" -e "AMAZON_AD_API_REFRESH_TOKEN=${AMAZON_AD_API_REFRESH_TOKEN}" -e "OPENBRIDGE_REFRESH_TOKEN=${OPENBRIDGE_REFRESH_TOKEN}" -e "OPENBRIDGE_API_KEY=${OPENBRIDGE_API_KEY}" -e "AMAZON_ADS_DOWNLOAD_AUTH_TOKEN=${AMAZON_ADS_DOWNLOAD_AUTH_TOKEN}" -- uvx amazon-ads-mcp==0.2.4[mcp_servers.amazon_ads_mcp]
command = "uvx"
args = ["amazon-ads-mcp==0.2.4"]
env = { "AMAZON_AD_API_CLIENT_SECRET" = "${AMAZON_AD_API_CLIENT_SECRET}", "AMAZON_AD_API_REFRESH_TOKEN" = "${AMAZON_AD_API_REFRESH_TOKEN}", "OPENBRIDGE_REFRESH_TOKEN" = "${OPENBRIDGE_REFRESH_TOKEN}", "OPENBRIDGE_API_KEY" = "${OPENBRIDGE_API_KEY}", "AMAZON_ADS_DOWNLOAD_AUTH_TOKEN" = "${AMAZON_ADS_DOWNLOAD_AUTH_TOKEN}" }
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"amazon_ads_mcp": {
"type": "local",
"command": [
"uvx",
"amazon-ads-mcp==0.2.4"
],
"enabled": true,
"environment": {
"AMAZON_AD_API_CLIENT_SECRET": "{env:AMAZON_AD_API_CLIENT_SECRET}",
"AMAZON_AD_API_REFRESH_TOKEN": "{env:AMAZON_AD_API_REFRESH_TOKEN}",
"OPENBRIDGE_REFRESH_TOKEN": "{env:OPENBRIDGE_REFRESH_TOKEN}",
"OPENBRIDGE_API_KEY": "{env:OPENBRIDGE_API_KEY}",
"AMAZON_ADS_DOWNLOAD_AUTH_TOKEN": "{env:AMAZON_ADS_DOWNLOAD_AUTH_TOKEN}"
}
}
}
}{
"mcpServers": {
"amazon_ads_mcp": {
"command": "uvx",
"args": [
"amazon-ads-mcp==0.2.4"
],
"env": {
"AMAZON_AD_API_CLIENT_SECRET": "${AMAZON_AD_API_CLIENT_SECRET}",
"AMAZON_AD_API_REFRESH_TOKEN": "${AMAZON_AD_API_REFRESH_TOKEN}",
"OPENBRIDGE_REFRESH_TOKEN": "${OPENBRIDGE_REFRESH_TOKEN}",
"OPENBRIDGE_API_KEY": "${OPENBRIDGE_API_KEY}",
"AMAZON_ADS_DOWNLOAD_AUTH_TOKEN": "${AMAZON_ADS_DOWNLOAD_AUTH_TOKEN}"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=amazon_ads_mcp&config=eyJjb21tYW5kIjoidXZ4IiwiYXJncyI6WyJhbWF6b24tYWRzLW1jcD09MC4yLjQiXSwiZW52Ijp7IkFNQVpPTl9BRF9BUElfQ0xJRU5UX1NFQ1JFVCI6IiR7QU1BWk9OX0FEX0FQSV9DTElFTlRfU0VDUkVUfSIsIkFNQVpPTl9BRF9BUElfUkVGUkVTSF9UT0tFTiI6IiR7QU1BWk9OX0FEX0FQSV9SRUZSRVNIX1RPS0VOfSIsIk9QRU5CUklER0VfUkVGUkVTSF9UT0tFTiI6IiR7T1BFTkJSSURHRV9SRUZSRVNIX1RPS0VOfSIsIk9QRU5CUklER0VfQVBJX0tFWSI6IiR7T1BFTkJSSURHRV9BUElfS0VZfSIsIkFNQVpPTl9BRFNfRE9XTkxPQURfQVVUSF9UT0tFTiI6IiR7QU1BWk9OX0FEU19ET1dOTE9BRF9BVVRIX1RPS0VOfSJ9fQ%3D%3D"
}{
"servers": {
"amazon_ads_mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"amazon-ads-mcp==0.2.4"
],
"env": {
"AMAZON_AD_API_CLIENT_SECRET": "${AMAZON_AD_API_CLIENT_SECRET}",
"AMAZON_AD_API_REFRESH_TOKEN": "${AMAZON_AD_API_REFRESH_TOKEN}",
"OPENBRIDGE_REFRESH_TOKEN": "${OPENBRIDGE_REFRESH_TOKEN}",
"OPENBRIDGE_API_KEY": "${OPENBRIDGE_API_KEY}",
"AMAZON_ADS_DOWNLOAD_AUTH_TOKEN": "${AMAZON_ADS_DOWNLOAD_AUTH_TOKEN}"
}
}
}
}{
"mcpServers": {
"amazon_ads_mcp": {
"command": "uvx",
"args": [
"amazon-ads-mcp==0.2.4"
],
"env": {
"AMAZON_AD_API_CLIENT_SECRET": "${AMAZON_AD_API_CLIENT_SECRET}",
"AMAZON_AD_API_REFRESH_TOKEN": "${AMAZON_AD_API_REFRESH_TOKEN}",
"OPENBRIDGE_REFRESH_TOKEN": "${OPENBRIDGE_REFRESH_TOKEN}",
"OPENBRIDGE_API_KEY": "${OPENBRIDGE_API_KEY}",
"AMAZON_ADS_DOWNLOAD_AUTH_TOKEN": "${AMAZON_ADS_DOWNLOAD_AUTH_TOKEN}"
}
}
}
}extensions:
"amazon_ads_mcp":
enabled: true
name: "amazon_ads_mcp"
type: stdio
cmd: "uvx"
args:
- "amazon-ads-mcp==0.2.4"
envs:
"AMAZON_AD_API_CLIENT_SECRET": "${AMAZON_AD_API_CLIENT_SECRET}"
"AMAZON_AD_API_REFRESH_TOKEN": "${AMAZON_AD_API_REFRESH_TOKEN}"
"OPENBRIDGE_REFRESH_TOKEN": "${OPENBRIDGE_REFRESH_TOKEN}"
"OPENBRIDGE_API_KEY": "${OPENBRIDGE_API_KEY}"
"AMAZON_ADS_DOWNLOAD_AUTH_TOKEN": "${AMAZON_ADS_DOWNLOAD_AUTH_TOKEN}"
timeout: 300
Placeholders to fill from your own secret store: ${AMAZON_AD_API_CLIENT_SECRET}, ${AMAZON_AD_API_REFRESH_TOKEN}, ${OPENBRIDGE_REFRESH_TOKEN}, ${OPENBRIDGE_API_KEY}, ${AMAZON_ADS_DOWNLOAD_AUTH_TOKEN}. The registry never accepts secret values.
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns2 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-rww4-4w9c-7733 in [email protected] (direct, fixed in 3.2.0), GHSA-vv7q-7jx5-f767 in [email protected] (direct, fixed in 3.2.0); 2 more of lower severity or without a fixdeps.mcp_sdk_versionmcp 1.30.0, no known advisorydeps.resolvable[email protected] resolved: 86 packagesNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository ~liveness-unmeasured -stale-258d
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] PyPI85 dependencies, resolved · MCP SDK mcp 1.30.0 · advisories checked 2026-10-19
| advisory | severity | package | fixed in |
|---|---|---|---|
| GHSA-vv7q-7jx5-f767FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability | critical | [email protected]direct | fixed in 3.2.0 |
| GHSA-rww4-4w9c-7733FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities | high | [email protected]direct | fixed in 3.2.0 |
| GHSA-m8x7-r2rg-vh5gFastMCP has a Command Injection vulnerability - Gemini CLI | moderate | [email protected]direct | fixed in 3.2.0 |
| GHSA-w8v5-vhqr-4h9vDiskCache has unsafe pickle deserialization | moderate | [email protected]indirect | no fix yet |
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
amazon-ads-mcp | pypi | 0.2.4 | – | AMAZON_AD_API_CLIENT_SECRET, AMAZON_AD_API_REFRESH_TOKEN, OPENBRIDGE_REFRESH_TOKEN, OPENBRIDGE_API_KEY, AMAZON_ADS_DOWNLOAD_AUTH_TOKEN |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
1 other active names share this repository: io.github.KuudoAI/amazon_ads_mcp
{
"name": "io.github.tspicer/amazon_ads_mcp",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.2.4",
"packages": [
{
"version": "0.2.4",
"transport": {
"type": "stdio"
},
"identifier": "amazon-ads-mcp",
"registryType": "pypi",
"environmentVariables": [
{
"name": "AMAZON_ADS_AUTH_METHOD",
"description": "Authentication method: direct or openbridge."
},
{
"name": "AMAZON_AD_API_CLIENT_ID",
"description": "Amazon Ads API client ID for direct auth."
},
{
"name": "AMAZON_AD_API_CLIENT_SECRET",
"isSecret": true,
"description": "Amazon Ads API client secret for direct auth."
},
{
"name": "AMAZON_AD_API_REFRESH_TOKEN",
"isSecret": true,
"description": "Amazon Ads API refresh token for direct auth."
},
{
"name": "AMAZON_AD_API_PROFILE_ID",
"description": "Amazon Ads profile ID for direct auth."
},
{
"name": "OPENBRIDGE_REFRESH_TOKEN",
"isSecret": true,
"description": "Openbridge refresh token (API key)."
},
{
"name": "OPENBRIDGE_API_KEY",
"isSecret": true,
"description": "Openbridge API key (alias for OPENBRIDGE_REFRESH_TOKEN)."
},
{
"name": "OPENBRIDGE_REMOTE_IDENTITY_ID",
"description": "Openbridge remote identity ID."
},
{
"name": "AMAZON_ADS_REGION",
"description": "Amazon Ads API region (na/eu/fe)."
},
{
"name": "AMAZON_AD_API_PACKAGES",
"description": "Comma-separated API packages to load."
},
{
"name": "AMAZON_ADS_DOWNLOAD_AUTH_TOKEN",
"isSecret": true,
"description": "Optional bearer token to protect download routes."
}
]
}
],
"repository": {
"url": "https://github.com/KuudoAI/amazon_ads_mcp",
"source": "github"
},
"description": "Amazon Ads API MCP server for Amazon Advertising API"
}