How do I install Brmarket?

Brmarket is a local plugin. Install it using npm package: brmarket-mcp and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Brmarket safe to use?

Brmarket was flagged by MCP Marketplace's security scan, scoring 4.2/10 (high risk). It has 3 high or critical findings to review. Review the security report on this page carefully before installing it.

What credentials does Brmarket need?

Brmarket requires the following credentials or environment variables: EVM_PRIVATE_KEY, SOLANA_PRIVATE_KEY, SOLANA_RPC_URL, BRMARKET_BASE_URL, X402_NETWORK. You can find setup instructions on the server detail page.

What AI apps work with Brmarket?

Brmarket uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Brmarket MCP Server

by Thomenz

Developer ToolsUse Caution4.2MCP RegistryLocal

Free

Server data from the Official MCP Registry

FREE Brazilian marketplace search (ML, Shopee, AliExpress) + import-tax calculator (x402)

About

FREE Brazilian marketplace search (ML, Shopee, AliExpress) + import-tax calculator (x402)

Security Report

4.2

Use Caution4.2High Risk

brmarket-mcp is a well-structured MCP server for Brazilian marketplace search with payment integration via x402 micropayments. Authentication is properly delegated to x402 libraries, and private keys are correctly loaded from environment variables rather than hardcoded. The primary concerns are moderate: private key environment variables are logged at startup (information leakage risk), and the server lacks input validation on some URL parameters. Permissions appropriately match the server's purpose (network access for marketplace APIs, environment variable access for wallet keys). Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

4 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

network_https

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

0x private key of a DEDICATED wallet holding USDC on Base. OPTIONAL: product search and the tax calculator are free and work without any wallet; only search_by_image and the link comparison return 402 without it.Required

Environment variable: EVM_PRIVATE_KEY

base58 or JSON-array secret key of a DEDICATED Solana wallet holding USDC (pays per call). Configure this and/or EVM_PRIVATE_KEY; the x402 layer settles on whichever rail the 402 advertises.Required

Environment variable: SOLANA_PRIVATE_KEY

Optional Solana RPC override used to build the payment (e.g. a Helius URL).Optional

Environment variable: SOLANA_RPC_URL

Base URL of a brmarket Worker. Defaults to the hosted production API (https://brmarket.thomenz.me).Optional

Environment variable: BRMARKET_BASE_URL

'base' (mainnet, default) or 'base-sepolia' (testnet).Optional

Environment variable: X402_NETWORK

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-thomenz-brmarket-mcp": {
      "env": {
        "X402_NETWORK": "your-x402-network-here",
        "SOLANA_RPC_URL": "your-solana-rpc-url-here",
        "EVM_PRIVATE_KEY": "your-evm-private-key-here",
        "BRMARKET_BASE_URL": "your-brmarket-base-url-here",
        "SOLANA_PRIVATE_KEY": "your-solana-private-key-here"
      },
      "args": [
        "-y",
        "brmarket-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

brmarket-mcp

MCP server for Brazilian marketplace product search, paid automatically with x402 micropayments (USDC on Base or Solana).

One call searches Mercado Livre, Shopee and AliExpress together and returns a single normalized shape: BRL prices in integer cents, canonical + affiliate links, and a per-marketplace sources state so a degraded marketplace is never silent. A free import-tax calculator turns a price into the real landed price — the honest "best value with Brazilian import tax" comparison.

Status: not published yet. brmarket-mcp@0.1.0 is built and ready; publishing to npm and the MCP registry is a manual step. See Publishing below.

Tools

Tool	Price	What it does
`search_products`	$0.01	Mercado Livre + Shopee + AliExpress in one call. Normalized BRL prices (integer cents), canonical + affiliate links, free shipping, rating, sold count, seller id/name/official-store, `dataAsOf`.
`search_by_image`	$0.05	Same, but from a product photo. Returns `interpreted_query` so you can see what was actually searched.
`search_products_preview`	free	One result, canonical link only, no affiliate link.
`calculate_import_taxes`	free	Brazilian import tax + landed price of a cross-border purchase (Import Tax 0% ≤ US$50 else 30% − US$20, ICMS por-dentro by state, Bacen PTAX rate). BRL cents or USD in; pass `uf` on `search_products` too for per-offer `landed_price_estimate`.

Always read `sources`

Every response reports each marketplace as ok / error / timeout / not_configured. A short result list may mean a marketplace was down, not that the market is thin. Never present a degraded page as the whole market.

Install

npx brmarket-mcp

Claude Desktop / Claude Code (claude_desktop_config.json):

{
  "mcpServers": {
    "brmarket": {
      "command": "npx",
      "args": ["-y", "brmarket-mcp"],
      "env": {
        "EVM_PRIVATE_KEY": "0x…"
      }
    }
  }
}

The free preview tool works with no wallet at all.

Environment

Variable	Required	Description
`EVM_PRIVATE_KEY`	no	`0x…` key of a dedicated wallet holding USDC on Base.
`SOLANA_PRIVATE_KEY`	no	base58 or JSON-array secret key of a dedicated Solana wallet holding USDC.
`SOLANA_RPC_URL`	no	RPC override used to build the Solana payment (e.g. a Helius URL).
`BRMARKET_BASE_URL`	no	Defaults to `https://brmarket.thomenz.me`.
`X402_NETWORK`	no	`base` (default) or `base-sepolia`.

Configure either rail, or both — the x402 layer settles on whichever the server's 402 advertises. Without any key, paid tools fail with HTTP 402.

⚠️ These keys spend real money. Use dedicated wallets with small balances, never a personal or treasury key. Anything that can read this process' environment can spend from them.

Develop

npm install
npm run build          # tsc -> dist/
npm run typecheck
npm run version:check  # all FIVE version sites must agree

Publishing (manual — Thiago only)

npm run version:check   # wired into prepublishOnly too
npm publish

Then verify the tarball from the registry, not the local build:

npm pack brmarket-mcp@<version> --registry https://registry.npmjs.org
tar -xzOf brmarket-mcp-<version>.tgz package/dist/index.js | grep -o 'version: "[^"]*"'

A green build proves nothing about what was published — brdata-mcp 0.3.4 shipped from a stale source copy and its MCP handshake reported 0.3.2 while npm said 0.3.4. Check the tarball.

For the MCP registry, server.json carries the full environmentVariables block. Do not drop it: brdata-mcp 0.3.3 published without it and the registry entry lost every variable.

License

MIT © Thiago Menzinger

Reviews

No reviews yet

Be the first to review this server!

4.7

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.