Back to Browse

Cdek MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for CDEK — delivery, tariffs, tracking, order management (Russia)

About

MCP server for CDEK — delivery, tariffs, tracking, order management (Russia)

Security Report

4.8
Use Caution4.8High Risk

This is a well-structured MCP server for CDEK delivery API with proper OAuth 2.0 authentication, comprehensive input validation via Zod schemas, and appropriate error handling. Credentials are correctly sourced from environment variables rather than hardcoded. Permissions align well with the server's stated purpose of managing deliveries and logistics. Minor code quality observations around broad error handling and lack of request logging do not significantly impact the security posture. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-theyahia-cdek-mcp": {
      "args": [
        "-y",
        "@theyahia/cdek-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

cdek-mcp

npm CI License: MIT

MCP server for the CDEK delivery API (v2). 16 tools covering the full delivery lifecycle: tariff calculation, order management, shipment tracking, location search, courier pickup, barcode/receipt generation, and webhooks.

Tools (16)

Tariffs

ToolDescription
calculate_tariffCalculate delivery cost and time for a specific tariff
calculate_tariff_listGet all available tariffs with prices for a route

Orders

ToolDescription
create_orderCreate a delivery order with sender, recipient, packages
get_orderGet order details and status by UUID
delete_orderCancel/delete an order by UUID
list_ordersSearch/filter orders by date range, IM number, or CDEK waybill

Tracking

ToolDescription
track_shipmentTrack shipment by CDEK waybill number

Locations

ToolDescription
get_citiesSearch city directory by name, postal code, or country
get_regionsSearch region directory by country or name
list_delivery_pointsFind pickup points and parcel lockers by city or GPS coordinates

Barcode & Print

ToolDescription
generate_barcodeGenerate barcode/label for an order
print_receiptGenerate receipt/waybill PDF for an order

Courier Pickup

ToolDescription
create_courier_pickupSchedule a courier pickup for an order
get_courier_pickupCheck courier pickup request status

Webhooks

ToolDescription
create_webhookRegister webhook for order status updates or delivery photos
delete_webhookRemove a webhook subscription by UUID

Quick Start

Claude Desktop

~/.config/claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "cdek": {
      "command": "npx",
      "args": ["-y", "@theyahia/cdek-mcp"],
      "env": {
        "CDEK_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CDEK_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "CDEK_SANDBOX": "true"
      }
    }
  }
}

Cursor / Windsurf

.cursor/mcp.json or .windsurf/mcp.json:

{
  "mcpServers": {
    "cdek": {
      "command": "npx",
      "args": ["-y", "@theyahia/cdek-mcp"],
      "env": {
        "CDEK_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CDEK_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "CDEK_SANDBOX": "true"
      }
    }
  }
}

VS Code (Copilot)

.vscode/mcp.json:

{
  "servers": {
    "cdek": {
      "command": "npx",
      "args": ["-y", "@theyahia/cdek-mcp"],
      "env": {
        "CDEK_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CDEK_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "CDEK_SANDBOX": "true"
      }
    }
  }
}

Streamable HTTP Transport

For web deployments, use the --http flag or HTTP_PORT env var:

HTTP_PORT=3000 npx @theyahia/cdek-mcp --http

Endpoints:

  • POST /mcp — MCP JSON-RPC
  • GET /mcp — SSE stream
  • DELETE /mcp — session termination
  • GET /health — health check

Environment Variables

VariableRequiredDescription
CDEK_CLIENT_IDYesClient ID from CDEK dashboard
CDEK_CLIENT_SECRETYesClient Secret from CDEK dashboard
CDEK_SANDBOXNotrue to use sandbox (api.edu.cdek.ru)
HTTP_PORTNoPort for HTTP transport (enables HTTP mode)

Get your API keys: CDEK Dashboard > Integration > API Keys.

Sandbox Mode

Set CDEK_SANDBOX=true to use the CDEK test environment (api.edu.cdek.ru). Production uses api.cdek.ru.

CDEK publishes a shared sandbox account for integration testing:

  • Client ID: EMscd6r9JnFiQ3bLoyjJY6eM78JrJceI
  • Client Secret: PjLZkKBHEiLK3YsjtNrt3TGNG0ahs3kh

⚠️ CDEK rotates this shared test account from time to time. If you get OAuth token error (HTTP 401) … invalid_client, the public pair has been rotated — request your own sandbox keys from the CDEK integration dashboard (lk.cdek.ru → Integration → API Keys).

Authentication

OAuth 2.0 Client Credentials flow, handled by the OAuthStrategy in @theyahia/mcp-core:

  • Automatic token acquisition on first request
  • Token caching with proactive refresh shortly before expiry
  • Concurrent request deduplication (a single in-flight token refresh is shared)
  • Automatic retry on 401 with token invalidation

E-commerce Stack

Pair with other russian-mcp servers for a complete e-commerce AI stack:

ServerPurpose
cdek-mcpShipping & logistics
dadata-mcpAddress validation, company lookup

Part of the russian-mcp series.

Demo Prompts

  1. "How much does it cost to ship a 2kg parcel from Moscow to Saint Petersburg?" Uses get_cities to find city codes, then calculate_tariff_list to compare all available tariffs.

  2. "Find the nearest CDEK pickup point to Red Square" Uses get_cities to resolve the Moscow city_code, then list_delivery_points with latitude: 55.7539, longitude: 37.6208, radius_km: 5 — results are filtered to the radius and sorted by distance (each annotated with координаты and расстояние_км).

  3. "Create an order to send a book from Kazan to Novosibirsk, schedule courier pickup, and print the receipt" Uses create_order, then create_courier_pickup to schedule collection, and print_receipt for the waybill.

Development

git clone https://github.com/theYahia/cdek-mcp.git
cd cdek-mcp
npm install

npm run lint        # ESLint (flat config)
npm run typecheck   # tsc --noEmit
npm run build       # emit dist/
npm test            # unit tests (vitest)
npm run test:e2e    # e2e smoke test (lists tools, no real credentials)

Run the server locally against the CDEK sandbox (api.edu.cdek.ru) — use the shared test pair from Sandbox Mode or your own sandbox keys:

CDEK_SANDBOX=true \
CDEK_CLIENT_ID=<YOUR_SANDBOX_CLIENT_ID> \
CDEK_CLIENT_SECRET=<YOUR_SANDBOX_CLIENT_SECRET> \
npm run dev

See CHANGELOG.md for release notes.

License

MIT

Reviews

No reviews yet

Be the first to review this server!

Cdek MCP Server - MCP server for CDEK — delivery, tariffs, tracking, order | MCP Marketplace