
CellarTracker
io.github.slavins-coPublished by GitHub account slavins-cov0.5.4Updated Oct 28, 2026
Read-only access to your CellarTracker wine cellar: inventory, drinking windows, purchases, notes.
Overview
Read-only MCP server that lets an assistant query your own CellarTracker wine cellar: inventory, drinking windows, purchases, notes and wishlist.
- What you can do
- Search and inspect the cellar: find wines by name, color, region, varietal, location or vintage, and look up individual bottles by bin, size or barcode
- Get drinking recommendations sorted by window urgency, plus collection statistics and breakdowns
- Review purchases and history: spending by store or date, recent deliveries, incoming orders, consumption history and tasting notes
- Read the wishlist with notes and max prices, force a data refresh, and set up or clear stored credentials
- Read cached table exports as resources for bulk analysis without per-tool result caps
- When to use it
- Useful when you keep a cellar in CellarTracker and want to ask conversational questions about what to open, what you paid, what is on the way, or what you have tasted, without exporting CSVs by hand.
- Requirements
- Runs locally over stdio as the npm package cellartracker-mcp (Node.js). Needs a CellarTracker username and password, supplied as CT_USERNAME and CT_PASSWORD environment variables or stored via the setup-credentials tool; the desktop extension prompts at install and keeps them in the OS keychain. Network access to CellarTracker is required.
Installation
In SourceWeft
- Open CellarTracker in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
CellarTracker MCP
Disclaimer: This is a community-maintained project with no affiliation to, or endorsement by, CellarTracker! LLC. It uses CellarTracker's self-serve data export on your own account's behalf.
Connect Claude to your CellarTracker wine cellar. Query your inventory, get drinking recommendations, and analyze purchases and drinking history, all through natural conversation. No need to refresh your inventory, or share your tasting notes. Claude pulls them directly from your CellarTracker account.
Install
Two install methods for different Claude interfaces. You may need one or both:
Which do I need?
- Chat (Desktop) only → Desktop Extension
- Code only → Claude Code Plugin
- Cowork only → Either works (plugin adds skills)
- Full coverage → Install both
Installing both is safe. The extension covers Chat (Desktop); the plugin covers Cowork and Code. In Cowork, both are accessible without conflict. Note, there is no coverage for claude.ai web chat sessions.
Desktop Extension (Chat & Cowork)
One-click install. No terminal needed.
- Download
cellartracker-mcp.mcpbfrom the latest release - Double-click the file to install in Claude Desktop
- Enter your CellarTracker username and password when prompted
- Start chatting (e.g. "What wines should I open this month?")
Credentials are stored in your OS keychain (macOS Keychain / Windows Credential Manager). To update them later, go to Customize > Connectors > CellarTracker.
Claude Code Plugin (Cowork & Code)
Full experience with tools and skills.
Via Desktop app
- Open the Code tab > Customize > Browse plugins > Personal > + > Add marketplace from GitHub > enter
slavins-co/cellartracker-mcp - Find "CellarTracker MCP" in the plugin browser and click Install
- Set up credentials immediately: In a new Code or Cowork session, say "Set up my CellarTracker credentials"
Via terminal
Step 1: Add the marketplace
Step 2: Install the plugin
Step 3: Set up credentials immediately — say:
"Set up my CellarTracker credentials"
Claude will verify and save them. No restart needed. Without credentials, tools will return errors and skills won't have data to work with.
Alternative: Set CT_USERNAME and CT_PASSWORD as environment variables in your shell profile.
Credentials are stored only on your machine. When using the setup tool, they pass through Anthropic's servers as part of the conversation. They are sent to CellarTracker's servers for authentication.
What you can do
Every tool returns structured JSON alongside its readable text, so clients can compute over results directly. List tools support offset pagination past the 25-per-page cap.
Resources
For bulk analysis without per-tool result caps, the server also exposes the cached table exports as MCP resources: cellartracker://tables/<Table> (raw CSV, one per table — List, Notes, Purchase, Consumed, Availability, Tag, Bottles, Pending) and cellartracker://meta/cache (JSON freshness timestamps per table plus the server version, readable without credentials).
Included skills
Note: Skills are available in Cowork and Code modes via the Claude Code plugin. Chat mode (Desktop Extension) provides tools only.
cellartracker-data — Teaches Claude to interpret CellarTracker data: table relationships, score abbreviations, drinking windows, and query routing.
wine-purchase-evaluator — Framework for evaluating wine purchases. Two-score system (Quality + Personal Fit) with BUY/CONSIDER/PASS verdicts. Checks your cellar for redundancy, verifies pricing, and applies drinking window discipline.
To customize the evaluator for your preferences, copy skills/wine-purchase-evaluator/references/preferences-example.md to preferences.md in the same directory and edit it.
How it works
CellarTracker has no official API. This server uses their CSV export endpoint, which authenticates with your username and password over HTTPS. Data is cached locally and auto-refreshes every 24 hours.
The server can only access your data — inventory, purchases, notes, and wishlist. It cannot search CellarTracker's full wine database.
Security & credentials
CellarTracker API limitations
CellarTracker has no OAuth, API keys, or scoped tokens. Authentication requires your actual account username and password, sent as URL query parameters over HTTPS. While encrypted on the wire, query parameters are routinely logged in server-side access logs on CellarTracker's infrastructure. There is no way to create read-only or limited-access credentials, therefore, this MCP only performs read operations, but it authenticates with your full account.
How this server protects your credentials
The Claude Code plugin stores credentials as plaintext in ~/.config/cellartracker-mcp/.env. We evaluated OS keychain integration (#22) and decided against it. The native dependency cost (node-gyp / keytar) outweighs the security benefit for wine cellar data, and the Desktop Extension path already uses the OS keychain.
Recommendations
- Use a unique password for CellarTracker. Do not reuse a password from other services.
- Prefer environment variables over the
setup-credentialstool if you want to avoid persisting credentials to disk. - Pin to a specific version in your MCP config (e.g.,
[email protected]) rather than relying on@latest.
Development
For contributors or anyone who wants to run from source:
npx local-resolution footgun
If you run npx -y cellartracker-mcp (e.g. via an MCP client config) with your working directory inside a local checkout of this repo, npm can resolve the bare package name to that local folder instead of downloading it from the registry — so whatever is on disk in dist/ gets served, not the published version. npm install/npm ci now runs a prepare script that rebuilds dist/ automatically, so a fresh clone is always current. But if you edit src/ directly and don't run npm install or npm run build again, dist/ will silently go stale — the server keeps running the old compiled code with no error. If output looks wrong while developing, rebuild (npm run build) before assuming the bug is in src/.
AI Disclosure
This project was developed with AI assistance.
Trademark Disclosure
This project is in no way affiliated or connected to CellarTracker! LLC. "CellarTracker" is a trademark of CellarTracker! LLC.
License
MIT
Source: README.md at commit d80f131
Tools
0Version history
4- v0.5.4LatestOct 13, 2026
- v0.5.2Oct 7, 2026
- v0.5.1Sep 30, 2026
- v0.5.0Sep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts