Wildberries Api MCP Server
wildberries-api-mcp
npm
v0.1.11
Published by an unidentified publisher — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
MCP server for Wildberries Seller API
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 3.3 = 97. What the published surface and source actually contain:
| Points | What was found | Category |
|---|---|---|
| −3.3 | Hidden unusual whitespace in description ×13 MTC-UNI-007 | injection |
2. Client adoption risk — 97 − 5 = 92. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −2 | publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 15
medium Untrusted input can drive an external actionMTC-FLOW-005
Untrusted-input tools ([fetch_image, products_product_cards_list]) co-exist with external-action tools ([communications_send_message]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.
Evidence: untrusted [fetch_image, products_product_cards_list] → sinks [communications_send_message]
Fix: Require confirmation for state-changing/egress actions triggered after processing untrusted content.
Location: flow fetch_image → communications_send_message
medium Unconstrained URL/host parameter "url" on "fetch_image"MTC-CAP-007
Tool "fetch_image" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool fetch_image · inputSchema.properties.url
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "finances_realization_sales_report". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool finances_realization_sales_report · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_get_orders_statuses". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_get_orders_statuses · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_cancel_the_order". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_cancel_the_order · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_transfer_to_assembly_2". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_transfer_to_assembly_2 · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_transfer_to_delivery_2". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_transfer_to_delivery_2 · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_notify_that_the_order_has_been_accepted_by_the_buyer". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_notify_that_the_order_has_been_accepted_by_the_buyer · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_notify_that_the_buyer_has_declined_the_order". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_notify_that_the_buyer_has_declined_the_order · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_get_order_metadata". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_get_order_metadata · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_delete_order_metadata". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_delete_order_metadata · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_add_data_matrix_code_to_the_order". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_add_data_matrix_code_to_the_order · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_add_uin_unique_identification_number_to_the_order". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_add_uin_unique_identification_number_to_the_order · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_add_imei_to_the_order". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_add_imei_to_the_order · description
low Hidden unusual whitespace in descriptionMTC-UNI-007
Found 1 unusual whitespace character(s) in the description of tool "orders_dbs_add_gtin_to_the_order". These are invisible to a human reviewer but are read verbatim by the model.
Evidence: 1× unusual-whitespace
Fix: Reject or normalize server metadata containing invisible/smuggling characters. Legitimate tool descriptions do not need them.
Location: tool orders_dbs_add_gtin_to_the_order · description
Tools 200
Each tool and what it can reach — statically extracted from the published source.
communications_send_messagenetwork egressfetch_imageingests untrusted inputproducts_product_cards_listingests untrusted inputanalytics_create_the_reportno sensitive capabilityanalytics_get_the_reportno sensitive capabilityanalytics_get_the_reports_listno sensitive capabilityanalytics_group_datano sensitive capabilityanalytics_grouped_product_cards_statistics_per_daysno sensitive capabilityanalytics_main_pageno sensitive capabilityanalytics_orders_and_positions_by_item_search_textsno sensitive capability
Show 190 more tools ↓
analytics_pagination_by_groupsno sensitive capabilityanalytics_pagination_by_products_within_a_groupno sensitive capabilityanalytics_product_cards_statistics_per_daysno sensitive capabilityanalytics_product_cards_statistics_per_periodno sensitive capabilityanalytics_product_datano sensitive capabilityanalytics_regenerate_the_reportno sensitive capabilityanalytics_search_texts_by_productno sensitive capabilityanalytics_size_datano sensitive capabilityanalytics_warehouse_datano sensitive capabilityanalytics_wb_warehouses_inventoryno sensitive capabilitycommunications_answer_buyers_applicationno sensitive capabilitycommunications_buyers_return_applicationsno sensitive capabilitycommunications_chat_eventsno sensitive capabilitycommunications_chat_listno sensitive capabilitycommunications_edit_response_to_feedbackno sensitive capabilitycommunications_feedbacks_listno sensitive capabilitycommunications_get_file_from_the_messageno sensitive capabilitycommunications_get_the_feedback_by_idno sensitive capabilitycommunications_get_the_question_by_idno sensitive capabilitycommunications_list_of_archived_feedbacksno sensitive capabilitycommunications_list_of_pinned_and_unpinned_feedbackno sensitive capabilitycommunications_number_of_feedbacksno sensitive capabilitycommunications_number_of_questionsno sensitive capabilitycommunications_pin_feedbackno sensitive capabilitycommunications_pinned_and_unpinned_feedback_numberno sensitive capabilitycommunications_pinned_feedback_limitsno sensitive capabilitycommunications_question_listno sensitive capabilitycommunications_reply_to_feedbackno sensitive capabilitycommunications_return_product_by_feedback_idno sensitive capabilitycommunications_unanswered_feedbacksno sensitive capabilitycommunications_unanswered_questionsno sensitive capabilitycommunications_unpin_feedbackno sensitive capabilitycommunications_unseen_feedbacks_and_questionsno sensitive capabilitycommunications_working_with_questionsno sensitive capabilityfinances_acquiring_expenses_report_listno sensitive capabilityfinances_details_for_the_acquiring_expenses_reports_by_periodno sensitive capabilityfinances_details_for_the_acquiring_expenses_reports_by_report_idno sensitive capabilityfinances_details_for_the_sales_reports_by_periodno sensitive capabilityfinances_details_for_the_sales_reports_by_report_idno sensitive capabilityfinances_documents_categoriesno sensitive capabilityfinances_documents_listno sensitive capabilityfinances_get_documentno sensitive capabilityfinances_get_documentsno sensitive capabilityfinances_get_seller_s_balanceno sensitive capabilityfinances_realization_sales_reportno sensitive capabilityfinances_sales_report_listno sensitive capabilitygeneral_connection_checkno sensitive capabilitygeneral_create_an_invitation_for_a_new_userno sensitive capabilitygeneral_delete_userno sensitive capabilitygeneral_get_a_list_of_seller_active_or_invited_usersno sensitive capabilitygeneral_get_jam_subscription_informationno sensitive capabilitygeneral_get_seller_informationno sensitive capabilitygeneral_get_seller_ratingno sensitive capabilitygeneral_getting_seller_portal_newsno sensitive capabilitygeneral_update_user_s_access_permissionsno sensitive capabilityin_store_pickup_add_data_matrix_codes_to_the_assembly_orders_chestny_znakno sensitive capabilityin_store_pickup_add_gtin_to_the_assembly_orderno sensitive capabilityin_store_pickup_add_gtin_to_the_assembly_ordersno sensitive capabilityin_store_pickup_add_imei_to_the_assembly_orderno sensitive capabilityin_store_pickup_add_imei_to_the_assembly_ordersno sensitive capabilityin_store_pickup_add_uin_unique_identification_number_to_the_assembly_orderno sensitive capabilityin_store_pickup_add_uin_unique_identification_numbers_to_the_assembly_ordersno sensitive capabilityin_store_pickup_assign_a_data_matrix_code_to_the_assembly_orderno sensitive capabilityin_store_pickup_buyer_informationno sensitive capabilityin_store_pickup_cancel_the_assembly_orderno sensitive capabilityin_store_pickup_cancel_the_assembly_ordersno sensitive capabilityin_store_pickup_check_if_the_order_belongs_to_the_buyerno sensitive capabilityin_store_pickup_delete_assembly_order_metadatano sensitive capabilityin_store_pickup_delete_assembly_order_metadata_2no sensitive capabilityin_store_pickup_get_assembly_order_metadatano sensitive capabilityin_store_pickup_get_assembly_order_statusesno sensitive capabilityin_store_pickup_get_assembly_order_statuses_2no sensitive capabilityin_store_pickup_get_assembly_orders_metadatano sensitive capabilityin_store_pickup_get_new_assembly_orders_listno sensitive capabilityin_store_pickup_notify_that_the_assembly_order_is_ready_for_pickupno sensitive capabilityin_store_pickup_notify_that_the_assembly_orders_are_ready_for_pickupno sensitive capabilityin_store_pickup_notify_that_the_buyer_refused_the_orderno sensitive capabilityin_store_pickup_notify_that_the_order_has_been_accepted_by_the_buyerno sensitive capabilityin_store_pickup_notify_that_the_orders_are_declinedno sensitive capabilityin_store_pickup_notify_that_the_orders_were_received_by_the_buyersno sensitive capabilityin_store_pickup_retrieve_information_on_completed_assembly_ordersno sensitive capabilityin_store_pickup_transfer_to_assemblyno sensitive capabilityin_store_pickup_transfer_to_assembly_2no sensitive capabilityorders_dbs_add_custom_declaration_to_the_ordersno sensitive capabilityorders_dbs_add_data_matrix_code_to_the_orderno sensitive capabilityorders_dbs_add_data_matrix_codes_to_assembly_orders_chestny_znakno sensitive capabilityorders_dbs_add_gtin_to_assembly_ordersno sensitive capabilityorders_dbs_add_gtin_to_the_orderno sensitive capabilityorders_dbs_add_imei_to_assembly_ordersno sensitive capabilityorders_dbs_add_imei_to_the_orderno sensitive capabilityorders_dbs_add_uin_unique_identification_number_to_assembly_ordersno sensitive capabilityorders_dbs_add_uin_unique_identification_number_to_the_orderno sensitive capabilityorders_dbs_b2b_buyer_informationno sensitive capabilityorders_dbs_buyer_informationno sensitive capabilityorders_dbs_cancel_assembly_ordersno sensitive capabilityorders_dbs_cancel_the_orderno sensitive capabilityorders_dbs_delete_assembly_orders_metadatano sensitive capabilityorders_dbs_delete_order_metadatano sensitive capabilityorders_dbs_delivery_date_and_timeno sensitive capabilityorders_dbs_get_assembly_order_statusesno sensitive capabilityorders_dbs_get_assembly_orders_metadatano sensitive capabilityorders_dbs_get_information_on_completed_ordersno sensitive capabilityorders_dbs_get_information_on_paid_deliveryno sensitive capabilityorders_dbs_get_new_orders_listno sensitive capabilityorders_dbs_get_order_metadatano sensitive capabilityorders_dbs_get_orders_statusesno sensitive capabilityorders_dbs_get_stickers_for_assembly_orders_with_delivery_to_pickup_pointno sensitive capabilityorders_dbs_notify_that_the_buyer_has_declined_the_orderno sensitive capabilityorders_dbs_notify_that_the_order_has_been_accepted_by_the_buyerno sensitive capabilityorders_dbs_notify_that_the_orders_are_declinedno sensitive capabilityorders_dbs_notify_that_the_orders_are_receivedno sensitive capabilityorders_dbs_transfer_to_assemblyno sensitive capabilityorders_dbs_transfer_to_assembly_2no sensitive capabilityorders_dbs_transfer_to_deliveryno sensitive capabilityorders_dbs_transfer_to_delivery_2no sensitive capabilityorders_dbw_add_data_matrix_code_to_the_orderno sensitive capabilityorders_dbw_add_gtin_to_the_orderno sensitive capabilityorders_dbw_add_imei_to_the_orderno sensitive capabilityorders_dbw_add_uin_unique_identification_number_to_the_orderno sensitive capabilityorders_dbw_buyer_informationno sensitive capabilityorders_dbw_cancel_the_orderno sensitive capabilityorders_dbw_courier_infono sensitive capabilityorders_dbw_delete_order_metadatano sensitive capabilityorders_dbw_delivery_date_and_timeno sensitive capabilityorders_dbw_get_information_on_completed_ordersno sensitive capabilityorders_dbw_get_new_ordersno sensitive capabilityorders_dbw_get_order_metadatano sensitive capabilityorders_dbw_get_orders_statusesno sensitive capabilityorders_dbw_get_orders_stickersno sensitive capabilityorders_dbw_transfer_to_assemblyno sensitive capabilityorders_dbw_transfer_to_deliveryno sensitive capabilityorders_fbs_add_assembly_orders_to_the_supplyno sensitive capabilityorders_fbs_add_boxes_to_the_supplyno sensitive capabilityorders_fbs_add_custom_declaration_number_to_the_orderno sensitive capabilityorders_fbs_add_data_matrix_code_to_the_assembly_orderno sensitive capabilityorders_fbs_add_expiration_date_to_the_assembly_orderno sensitive capabilityorders_fbs_add_gtin_to_the_assembly_orderno sensitive capabilityorders_fbs_add_imei_to_the_assembly_orderno sensitive capabilityorders_fbs_add_uin_unique_identification_number_to_the_assembly_orderno sensitive capabilityorders_fbs_cancel_the_assembly_orderno sensitive capabilityorders_fbs_create_a_new_supplyno sensitive capabilityorders_fbs_create_passno sensitive capabilityorders_fbs_delete_assembly_order_metadatano sensitive capabilityorders_fbs_delete_boxes_from_the_supplyno sensitive capabilityorders_fbs_delete_the_passno sensitive capabilityorders_fbs_delete_the_supplyno sensitive capabilityorders_fbs_get_a_supplies_listno sensitive capabilityorders_fbs_get_all_assembly_orders_for_re_shipmentno sensitive capabilityorders_fbs_get_assembly_ordersno sensitive capabilityorders_fbs_get_assembly_orders_metadatano sensitive capabilityorders_fbs_get_assembly_orders_statusesno sensitive capabilityorders_fbs_get_assembly_orders_stickersno sensitive capabilityorders_fbs_get_new_assembly_ordersno sensitive capabilityorders_fbs_get_offices_for_passno sensitive capabilityorders_fbs_get_passesno sensitive capabilityorders_fbs_get_stickers_for_cross_border_assembly_ordersno sensitive capabilityorders_fbs_get_supply_assembly_order_idsno sensitive capabilityorders_fbs_get_supply_boxes_listno sensitive capabilityorders_fbs_get_supply_detailsno sensitive capabilityorders_fbs_get_the_supply_box_qr_code_stickersno sensitive capabilityorders_fbs_get_the_supply_qr_codeno sensitive capabilityorders_fbs_move_the_supply_to_the_deliveryno sensitive capabilityorders_fbs_orders_with_client_informationno sensitive capabilityorders_fbs_status_history_for_cross_border_ordersno sensitive capabilityorders_fbs_update_passno sensitive capabilityorders_fbw_acceptance_optionsno sensitive capabilityorders_fbw_supplies_listno sensitive capabilityorders_fbw_supply_detailsno sensitive capabilityorders_fbw_supply_packageno sensitive capabilityorders_fbw_supply_productsno sensitive capabilityorders_fbw_transit_directionsno sensitive capabilityorders_fbw_warehouses_listno sensitive capabilityproducts_brandsno sensitive capabilityproducts_colorno sensitive capabilityproducts_country_of_originno sensitive capabilityproducts_create_product_cardsno sensitive capabilityproducts_create_product_cards_with_mergeno sensitive capabilityproducts_genderno sensitive capabilityproducts_generation_of_skusno sensitive capabilityproducts_hs_codesno sensitive capabilityproducts_limits_for_the_product_cardsno sensitive capabilityproducts_list_of_failed_product_cards_with_errorsno sensitive capabilityproducts_merging_or_separating_of_product_cardsno sensitive capabilityproducts_products_parent_categoriesno sensitive capabilityproducts_seasonno sensitive capabilityproducts_subject_characteristicsno sensitive capabilityproducts_subjects_listno sensitive capabilityproducts_transfer_product_card_to_trashno sensitive capabilityproducts_update_product_cardsno sensitive capabilityproducts_vat_rateno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 2
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.1.11 latest |
A 92/100 | 15 | 1.13.0 | 2026-09-07 |
v0.1.10 |
A 92/100 | 15 | 1.13.0 | 2026-08-25 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan wildberries-api-mcp --onlineMore in Business & CRM
Free public tax reference data — GST/VAT, income, company and capital-gains tax rules for 50+ countries.
The approval gate for unattended UCP buying agents — a policy/approval MCP proxy in front of a merchant's UCP checkout endpoint.
Autotask PSA MCP server. Generic entity query/get/create/update across the full REST API plus convenience tools for tickets, companies, contacts, projects, tasks and time entries. AI-safe with readonly mode and destructive-action confirmation. stdio + opt
MCP server for B2C Commerce developer experience tools
Search, compare and contact real-world companies through a public MCP business directory.
Norwegian business register (Brønnøysundregistrene) as an MCP server — companies, roles, subunits and annual accounts, with the register's silent traps encoded as guards.