
Etsy Seller MCP Hub
io.github.Bl0ck154Published by GitHub account Bl0ck154v0.5.0Updated Nov 3, 2026
Self-hosted Etsy seller tools for shop listings, orders, inventory and media via MCP.
Overview
Etsy Seller MCP Hub's local MCP server; no sign-in required; STDIO.
No AI overview yet: these facts come from the registry entry and the server itself.
Installation
In SourceWeft
- Open Etsy Seller MCP Hub in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
Etsy Seller MCP Hub
[CI] [npm] [License: MIT] Official MCP Registry [Glama score]
Open-source MCP server for Etsy sellers. Manage your own Etsy shop's listings, orders, inventory, personalization and media with AI assistants, scripts or local applications. Built on the Etsy Open API v3 with 79 MCP tools, a CLI and a local HTTP gateway.
This is a seller-side shop management toolkit. It does not monitor consumer prices, search for buyer deals or automate shopping.
First-time setup · Security review · Connector troubleshooting · MCP configs · Seller workflows demo · Existing API keys · Hosting and privacy · Roadmap · Glama listing · FAQ · Directories
The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.
What can sellers do?
- Inspect active listings and inventory; review orders, transactions, shop data and shipping settings.
- Update approved listings, inventory and personalization; upload product images, videos or files.
- Use Etsy's current Open API v3 endpoints through 79 MCP tools, with advanced raw API operations when needed.
- Run the same seller workflows from the
etsyctlCLI, local HTTP API or compatible AI clients.
Example prompts: “Which of my active listings have low stock?”, “Show paid but unshipped orders by ID”, “Review the personalization options for listing 123456789”, “Prepare these listing changes for my approval”.
Seller-focused read-only workflows: etsy_report_low_stock (bounded inventory scan) and etsy_report_unshipped (minimized customer data). CLI equivalents: etsyctl report low-stock and etsyctl report unshipped.
Quick start
See the step-by-step guide for Etsy authorization and operating system details.
Requires Node.js 22+ plus an approved Etsy Open API v3 app and authorized credentials.
Install from npm
Install the public package from npm:
The npm package is etsy-seller-mcp-hub. For first use, add ETSY_MCP_READ_ONLY=1 in the MCP client config. The installed commands remain etsy-mcp (local MCP server) and etsyctl (CLI).
Run from source
Configuration examples use Linux filesystem locations. Replace them with absolute paths for your computer; never commit keys or tokens. The shops command lists configured shop aliases, whereas live shop operations require OAuth. See credentials.example.json and MCP client setup.
CLI examples
The seller reports are read-only and do not return buyer contact information in the paid/unshipped summary.
Advanced CLI examples
Will my old Etsy API key work?
Yes, if it is an existing approved key for Etsy Open API v3 and you have the required OAuth authorization. Etsy's July 2026 Seller App tier is an easier approval path for new shop owners. Etsy explicitly says that sellers who already hold a Personal Key are not eligible for that new tier because their current keys offer comparable access.
MCP adds an interface for AI clients; it does not change Etsy's permissions. We do not operate a shared server that collects other sellers' Etsy tokens. Seller Apps are own-shop only. A developer operating one service for unrelated sellers needs suitable Etsy access (Personal App and potentially Commercial Access) and secure multi-tenant OAuth, which this repository does not currently implement. Each self-hosted user must configure their own authorized credentials.
Read Etsy API access: existing keys, Seller Apps and Commercial Access.
Authentication and security
Etsy v3 requires a keystring and shared secret in the x-api-key header. Access to private seller data or write operations additionally requires OAuth 2.0 scopes. The hub supports OAuth PKCE, refresh, retries and rate limits. To authorize your shop:
The hub verifies ownership of the configured shop after OAuth. Do not copy refresh tokens from other programs that rotate them.
For local HTTP:
The service binds to 127.0.0.1 by default and refuses external binds without an internal bearer token. For remote use, add authenticated TLS and appropriate access controls. Existing remote MCP OAuth supports a private, owner-approved ChatGPT client, not general third-party seller sign-in.
The public self-hosted MCP exposes 79 tools in full mode. Set ETSY_MCP_READ_ONLY=1 to expose only 53 tools annotated read-only. To enable writes, remove the read-only variable, grant the necessary Etsy OAuth write scopes and reauthorize your own shop. Full-access steps. This is an additional tool filter, not a substitute for Etsy OAuth permissions. Typed listing, inventory and media writes create backups where supported; raw API writes have no automatic snapshots. Confirm any live modification before giving an AI client write access.
Docker
Inside Docker, set server.host to 0.0.0.0 and configure a nonempty server.auth_token_file, otherwise startup will reject external binding. Expose the host port only on localhost or behind authenticated HTTPS. The Dockerfile runs as a non-root user.
Development
Tests use mocks and do not write to a live shop. See Contributing, Security and the MIT license.
© 2026 Bl0ck154. Independent open-source software for authorized Etsy seller integrations.
Multipart media uploads are limited to 64 MiB of decoded files per request by default. Configure ETSY_HUB_MAX_UPLOAD_BYTES (bytes, maximum 192 MiB) for larger files. Local file-path multipart uploads now stream in 64 KiB chunks; base64 JSON uploads from remote MCP remain buffered and size-limited.
Source: README.md at commit 99ed1fa
Tools
0Version history
1- v0.5.0LatestNov 3, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts