Inspection report
amazon-sp-api
Open source MCP server from l6kmw. Tool list: code-checked7.
The answer
0
What can it change in your account?
None of the 13 tools on record can change data.
name based Read and write here are inferred from tool names and descriptions, not from a test.
| Area | Access | Write tools | Read tools |
|---|---|---|---|
| Orders | R Orders read only | 0 | 3 |
| Ads | · Ads no tool on record | 0 | 0 |
| Listings | R Listings read only | 0 | 2 |
| Pricing | · Pricing no tool on record | 0 | 0 |
| Inventory | R Inventory read only | 0 | 2 |
| Reports | · Reports no tool on record | 0 | 0 |
| Finance | · Finance no tool on record | 0 | 0 |
Record
The facts on file.
- Type
- open-source
- Vendor or owner
- l6kmw
- License
- MIT3
- Authentication
- LWA refresh token, OAuth (mentioned)4
- Transport
- http
- Marketplaces
- AU, BR, DE, EG, ES, FR, IN, IT, JP, MX, NL, UK, US6
- Pricing
- free / open source (self-hosted; upstream API costs apply)5
- Last commit
- Oct 3, 2026
- Last release
- Not published
- GitHub stars
- 0
- Tool list from
- code-checked7
Tools
All 13 tools we found.
Grouped by what they do to your data. The access column shows why we put a tool there.
read Reads data 13
| Tool | Description | Area | Access basis |
|---|---|---|---|
| amazon_business_snapshot | Not published | Other | name based |
| amazon_connection_health | Not published | Other | name based |
| amazon_get_identity | Return a safe summary of the authenticated MCP identity. No tenant, workspace, JWT claims, token, or credential metadata is returned. | Other | name based |
| amazon_get_inventory_by_sku | Not published | Inventory | name based |
| amazon_get_listing_item | Not published | Listings | name based |
| amazon_get_order | Not published | Orders | name based |
| amazon_get_read_capabilities | List allowlisted Seller read actions from the frozen official model. Status is observed locally and does not trigger Amazon permission probes. | Other | name based |
| amazon_list_accounts | List Amazon seller accounts available to the authenticated identity. Use account_id as the canonical account selector for ConnectedAccount-compatible tools; external_account_id… | Other | name based |
| amazon_list_inventory_summaries | Not published | Inventory | name based |
| amazon_list_marketplaces | Not published | Other | name based |
| amazon_list_order_items | Not published | Orders | name based |
| amazon_search_listings | Not published | Listings | name based |
| amazon_search_orders | Not published | Orders | name based |
Method
How we checked this server.
We read the tool definitions in the source code. We did not run the server against a seller account.7
Not tested with credentials. We did not connect this server to a seller or ads account. A tool marked read can still have side effects we could not see, and a vendor can add write tools at any time. Check the list again before you grant access.
Areas come from keywords in tool names, as explained on the matrix page.
Notes
Sources for this report
- 1Source repository or product pagegithub.com
- 2Documentationgithub.com
- 3License: GitHub API repo.license (search 2026-10-30)
- 4Authentication: static scan of repo (env names / code patterns)
- 5Pricing: https://github.com/l6kmw/amazon-sp-apigithub.com
- 6Marketplaces: marketplace IDs found in code
- 7Our MCP inventory of Oct 30, 2026: tool list, access marks, stars and last commit. GitHub repository search (22 queries, unauthenticated) -> shallow clone -> static extraction (extract_tools.py) -> optional runtime tools/list (mcp_probe.py); vendor/official from public docs. access=read|write is a name/description heuristic unless access_basis says otherwise.