Server data from the Official MCP Registry
MCP server for CDEK — delivery, tariffs, tracking, order management (Russia)
About
MCP server for CDEK — delivery, tariffs, tracking, order management (Russia)
Security Report
This is a well-structured MCP server for CDEK delivery API with proper OAuth 2.0 authentication, comprehensive input validation via Zod schemas, and appropriate error handling. Credentials are correctly sourced from environment variables rather than hardcoded. Permissions align well with the server's stated purpose of managing deliveries and logistics. Minor code quality observations around broad error handling and lack of request logging do not significantly impact the security posture. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 7 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-theyahia-cdek-mcp": {
"args": [
"-y",
"@theyahia/cdek-mcp"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
cdek-mcp
MCP server for the CDEK delivery API (v2). 16 tools covering the full delivery lifecycle: tariff calculation, order management, shipment tracking, location search, courier pickup, barcode/receipt generation, and webhooks.
Tools (16)
Tariffs
| Tool | Description |
|---|---|
calculate_tariff | Calculate delivery cost and time for a specific tariff |
calculate_tariff_list | Get all available tariffs with prices for a route |
Orders
| Tool | Description |
|---|---|
create_order | Create a delivery order with sender, recipient, packages |
get_order | Get order details and status by UUID |
delete_order | Cancel/delete an order by UUID |
list_orders | Search/filter orders by date range, IM number, or CDEK waybill |
Tracking
| Tool | Description |
|---|---|
track_shipment | Track shipment by CDEK waybill number |
Locations
| Tool | Description |
|---|---|
get_cities | Search city directory by name, postal code, or country |
get_regions | Search region directory by country or name |
list_delivery_points | Find pickup points and parcel lockers by city or GPS coordinates |
Barcode & Print
| Tool | Description |
|---|---|
generate_barcode | Generate barcode/label for an order |
print_receipt | Generate receipt/waybill PDF for an order |
Courier Pickup
| Tool | Description |
|---|---|
create_courier_pickup | Schedule a courier pickup for an order |
get_courier_pickup | Check courier pickup request status |
Webhooks
| Tool | Description |
|---|---|
create_webhook | Register webhook for order status updates or delivery photos |
delete_webhook | Remove a webhook subscription by UUID |
Quick Start
Claude Desktop
~/.config/claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"cdek": {
"command": "npx",
"args": ["-y", "@theyahia/cdek-mcp"],
"env": {
"CDEK_CLIENT_ID": "<YOUR_CLIENT_ID>",
"CDEK_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
"CDEK_SANDBOX": "true"
}
}
}
}
Cursor / Windsurf
.cursor/mcp.json or .windsurf/mcp.json:
{
"mcpServers": {
"cdek": {
"command": "npx",
"args": ["-y", "@theyahia/cdek-mcp"],
"env": {
"CDEK_CLIENT_ID": "<YOUR_CLIENT_ID>",
"CDEK_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
"CDEK_SANDBOX": "true"
}
}
}
}
VS Code (Copilot)
.vscode/mcp.json:
{
"servers": {
"cdek": {
"command": "npx",
"args": ["-y", "@theyahia/cdek-mcp"],
"env": {
"CDEK_CLIENT_ID": "<YOUR_CLIENT_ID>",
"CDEK_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
"CDEK_SANDBOX": "true"
}
}
}
}
Streamable HTTP Transport
For web deployments, use the --http flag or HTTP_PORT env var:
HTTP_PORT=3000 npx @theyahia/cdek-mcp --http
Endpoints:
POST /mcp— MCP JSON-RPCGET /mcp— SSE streamDELETE /mcp— session terminationGET /health— health check
Environment Variables
| Variable | Required | Description |
|---|---|---|
CDEK_CLIENT_ID | Yes | Client ID from CDEK dashboard |
CDEK_CLIENT_SECRET | Yes | Client Secret from CDEK dashboard |
CDEK_SANDBOX | No | true to use sandbox (api.edu.cdek.ru) |
HTTP_PORT | No | Port for HTTP transport (enables HTTP mode) |
Get your API keys: CDEK Dashboard > Integration > API Keys.
Sandbox Mode
Set CDEK_SANDBOX=true to use the CDEK test environment (api.edu.cdek.ru). Production uses api.cdek.ru.
CDEK publishes a shared sandbox account for integration testing:
- Client ID:
EMscd6r9JnFiQ3bLoyjJY6eM78JrJceI - Client Secret:
PjLZkKBHEiLK3YsjtNrt3TGNG0ahs3kh
⚠️ CDEK rotates this shared test account from time to time. If you get
OAuth token error (HTTP 401) … invalid_client, the public pair has been rotated — request your own sandbox keys from the CDEK integration dashboard (lk.cdek.ru → Integration → API Keys).
Authentication
OAuth 2.0 Client Credentials flow, handled by the OAuthStrategy in @theyahia/mcp-core:
- Automatic token acquisition on first request
- Token caching with proactive refresh shortly before expiry
- Concurrent request deduplication (a single in-flight token refresh is shared)
- Automatic retry on 401 with token invalidation
E-commerce Stack
Pair with other russian-mcp servers for a complete e-commerce AI stack:
| Server | Purpose |
|---|---|
| cdek-mcp | Shipping & logistics |
| dadata-mcp | Address validation, company lookup |
Part of the russian-mcp series.
Demo Prompts
-
"How much does it cost to ship a 2kg parcel from Moscow to Saint Petersburg?" Uses
get_citiesto find city codes, thencalculate_tariff_listto compare all available tariffs. -
"Find the nearest CDEK pickup point to Red Square" Uses
get_citiesto resolve the Moscowcity_code, thenlist_delivery_pointswithlatitude: 55.7539,longitude: 37.6208,radius_km: 5— results are filtered to the radius and sorted by distance (each annotated withкоординатыandрасстояние_км). -
"Create an order to send a book from Kazan to Novosibirsk, schedule courier pickup, and print the receipt" Uses
create_order, thencreate_courier_pickupto schedule collection, andprint_receiptfor the waybill.
Development
git clone https://github.com/theYahia/cdek-mcp.git
cd cdek-mcp
npm install
npm run lint # ESLint (flat config)
npm run typecheck # tsc --noEmit
npm run build # emit dist/
npm test # unit tests (vitest)
npm run test:e2e # e2e smoke test (lists tools, no real credentials)
Run the server locally against the CDEK sandbox (api.edu.cdek.ru) — use the shared test pair from Sandbox Mode or your own sandbox keys:
CDEK_SANDBOX=true \
CDEK_CLIENT_ID=<YOUR_SANDBOX_CLIENT_ID> \
CDEK_CLIENT_SECRET=<YOUR_SANDBOX_CLIENT_SECRET> \
npm run dev
See CHANGELOG.md for release notes.
License
MIT
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.
