
ReplenishRadar
io.github.ReplenishRadarPublished by GitHub account ReplenishRadarv1.1.0Updated Oct 24, 2026
Shopify + Amazon inventory planning, forecasting & replenishment over MCP (50 tools).
Overview
Connects an AI assistant to ReplenishRadar for Shopify and Amazon inventory planning, forecasting, stockout risk and replenishment actions.
- What you can do
- Exposes roughly 50 tools over stdio for live inventory data: stockout risk, inventory position by location, demand forecasts, suggested purchase orders, replenishment actions, alerts, suppliers, purchase orders, sales history, top sellers, slow movers, inventory value and SKU or store health. It also offers basic writes such as acknowledging alerts, adding PO notes, requesting approval and preparing or executing replenishment actions, plus sensitive writes like creating, updating, sending or cancelling purchase orders and setting stock at manual locations. A small org-scoped key/value context store lets an agent remember bounded workflow state.
- When to use it
- Use it when an assistant should answer questions about stockout risk, demand forecasts, purchase orders or replenishment for a ReplenishRadar account, or drive draft purchase orders and replenishment actions from that data. It suits buyers and operations teams already running ReplenishRadar on Shopify or Amazon.
- Requirements
- Local Node.js runtime via npx package @replenishradar/mcp-server, desktop MCP client such as Claude Desktop. Requires a ReplenishRadar API key in REPLENISHRADAR_API_KEY (rr_sk_ prefix); REPLENISHRADAR_API_URL is optional and defaults to the vendor API. A paid tier governs available tools and rate limits.
Installation
In SourceWeft
- Open ReplenishRadar in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
@replenishradar/mcp-server
Connect AI agents to live ReplenishRadar inventory data. Works with Claude Desktop, OpenClaw, and any MCP-compatible client.
Setup
- Get your API key from ReplenishRadar > Settings > API Keys.
- Add this server to your MCP client config. In Claude Desktop, open Settings > Developer > Edit Config:
- Restart Claude Desktop and ask: "What are my top stockout risks?"
No ReplenishRadar account yet? Use the public agent intake endpoint to request a short-lived, read-only sandbox key before configuring the server:
Available Tools
Read
Standard includes limited read API access. Growth adds diagnosis/status read tools.
Basic write (Standard tier and up)
Safe, low-blast-radius writes - no money or stock mutation.
Sensitive write (Growth tier and up)
Money / stock mutation.
PO creation always starts as a draft. rr_send_purchase_order only sends a PO that was already human-approved.
Action execution has two modes. rr_execute_replenishment_action with mode="draft" (the default) creates a draft PO and/or draft transfer for an action's items and never auto-sends to a supplier or commits stock. With mode="autonomous" it additionally sends the PO or commits the transfer, but only when the key has sensitive_write + the operation's tool group + an enabled per-key budget (autonomous_enabled=true) and every guardrail passes; otherwise it leaves a draft and returns an rr_request_approval hint (draft_fallback) or refuses without mutating (hard_refuse). Call rr_prepare_replenishment_action first to get the action's current updated_at, then pass it as expected_updated_at so a stale action is rejected before any write. Pass a stable idempotency_key so a retried call replays the original result instead of double-creating artifacts or double-sending.
Agent context store
A small, org-scoped, auditable key/value memory so an agent can remember bounded workflow state. rr_get_agent_context / rr_list_agent_context are read-capability; rr_set_agent_context / rr_delete_agent_context are basic-write. All four are in the agent_context tool group.
Rules and limits:
- Namespaces are code-owned and per-key allowlisted. A human admin must grant your API key read/write/delete on each namespace in Settings > API Keys. Same-organization access alone is not sufficient.
- No secrets, no raw PII. Writes that look like tokens, passwords, private keys, credentials, or raw emails/phones/addresses are rejected.
valuemust be a JSON object (not a scalar or array), capped at 16 KiB serialized.ttl_secondsis optional and capped at 90 days; with no TTL the entry persists while the organization exists.rr_list_agent_contextrequiresnamespaceand never lists across namespaces.scope_refis descriptive metadata only and is not part of uniqueness - encode per-scope entries into thekey(for examplesupplier_rules/sku:ABC123).- Sensitive namespaces (for example
sourcing_economics) additionally require the key to hold the sensitive economics read capability + tool group.
Spend budgets (admin-managed, no MCP tool)
Per-API-key spend budgets - per-PO value cap, rolling-24h daily cap, max transfer quantity delta, an autonomous_enabled flag, and vendor / destination / transfer-source (or route-pair) allowlists - constrain what an autonomous key may buy or move. They are managed only by a human admin in Settings > API Keys (a JWT-admin Settings API); there is no MCP tool to read or change a budget, and an API key cannot reach the budget routes, not even for its own caps. Budgets are consumed only by autonomous send/commit, autonomous mode is off by default, and a denied autonomous action receives only a short decision reason - never the cap amounts, the allowlists, or another key's ledger.
Rate Limits
- Standard ($99/mo): 10 calls/hour, read + basic-write tools
- Growth ($199/mo): 100 calls/hour, read + basic + sensitive read/write + diagnosis/status tools
- Scale ($499/mo): 1,000 calls/hour, full read + write capability set
Learn More
Source: README.md at commit 3071ebf
Tools
0Version history
1- v1.1.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts