🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@theyahia/cdek-mcp

Package Overview
Dependencies
Maintainers
1
Versions
9
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@theyahia/cdek-mcp

MCP server for CDEK delivery API — 16 tools: calculate, orders, courier pickup, tracking, PVZ, print, webhooks. OAuth2 auth.

latest
Source
npmnpm
Version
2.2.0
Version published
Weekly downloads
38
-55.29%
Maintainers
1
Weekly downloads
 
Created
Source

cdek-mcp

npm CI License: MIT

MCP server for the CDEK delivery API (v2). 16 tools covering the full delivery lifecycle: tariff calculation, order management, shipment tracking, location search, courier pickup, barcode/receipt generation, and webhooks.

Tools (16)

Tariffs

ToolDescription
calculate_tariffCalculate delivery cost and time for a specific tariff
calculate_tariff_listGet all available tariffs with prices for a route

Orders

ToolDescription
create_orderCreate a delivery order with sender, recipient, packages
get_orderGet order details and status by UUID
delete_orderCancel/delete an order by UUID
list_ordersSearch/filter orders by date range, IM number, or CDEK waybill

Tracking

ToolDescription
track_shipmentTrack shipment by CDEK waybill number

Locations

ToolDescription
get_citiesSearch city directory by name, postal code, or country
get_regionsSearch region directory by country or name
list_delivery_pointsFind pickup points and parcel lockers by city or GPS coordinates

Barcode & Print

ToolDescription
generate_barcodeGenerate barcode/label for an order
print_receiptGenerate receipt/waybill PDF for an order

Courier Pickup

ToolDescription
create_courier_pickupSchedule a courier pickup for an order
get_courier_pickupCheck courier pickup request status

Webhooks

ToolDescription
create_webhookRegister webhook for order status updates or delivery photos
delete_webhookRemove a webhook subscription by UUID

Quick Start

Claude Desktop

~/.config/claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "cdek": {
      "command": "npx",
      "args": ["-y", "@theyahia/cdek-mcp"],
      "env": {
        "CDEK_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CDEK_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "CDEK_SANDBOX": "true"
      }
    }
  }
}

Cursor / Windsurf

.cursor/mcp.json or .windsurf/mcp.json:

{
  "mcpServers": {
    "cdek": {
      "command": "npx",
      "args": ["-y", "@theyahia/cdek-mcp"],
      "env": {
        "CDEK_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CDEK_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "CDEK_SANDBOX": "true"
      }
    }
  }
}

VS Code (Copilot)

.vscode/mcp.json:

{
  "servers": {
    "cdek": {
      "command": "npx",
      "args": ["-y", "@theyahia/cdek-mcp"],
      "env": {
        "CDEK_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CDEK_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "CDEK_SANDBOX": "true"
      }
    }
  }
}

Streamable HTTP Transport

For web deployments, use the --http flag or HTTP_PORT env var:

HTTP_PORT=3000 npx @theyahia/cdek-mcp --http

Endpoints:

  • POST /mcp — MCP JSON-RPC
  • GET /mcp — SSE stream
  • DELETE /mcp — session termination
  • GET /health — health check

Environment Variables

VariableRequiredDescription
CDEK_CLIENT_IDYesClient ID from CDEK dashboard
CDEK_CLIENT_SECRETYesClient Secret from CDEK dashboard
CDEK_SANDBOXNotrue to use sandbox (api.edu.cdek.ru)
HTTP_PORTNoPort for HTTP transport (enables HTTP mode)

Get your API keys: CDEK Dashboard > Integration > API Keys.

Sandbox Mode

Set CDEK_SANDBOX=true to use the CDEK test environment (api.edu.cdek.ru). Production uses api.cdek.ru.

CDEK publishes a shared sandbox account for integration testing:

  • Client ID: EMscd6r9JnFiQ3bLoyjJY6eM78JrJceI
  • Client Secret: PjLZkKBHEiLK3YsjtNrt3TGNG0ahs3kh

⚠️ CDEK rotates this shared test account from time to time. If you get OAuth token error (HTTP 401) … invalid_client, the public pair has been rotated — request your own sandbox keys from the CDEK integration dashboard (lk.cdek.ru → Integration → API Keys).

Authentication

OAuth 2.0 Client Credentials flow, handled by the OAuthStrategy in @theyahia/mcp-core:

  • Automatic token acquisition on first request
  • Token caching with proactive refresh shortly before expiry
  • Concurrent request deduplication (a single in-flight token refresh is shared)
  • Automatic retry on 401 with token invalidation

E-commerce Stack

Pair with other russian-mcp servers for a complete e-commerce AI stack:

ServerPurpose
cdek-mcpShipping & logistics
dadata-mcpAddress validation, company lookup

Part of the russian-mcp series.

Demo Prompts

  • "How much does it cost to ship a 2kg parcel from Moscow to Saint Petersburg?" Uses get_cities to find city codes, then calculate_tariff_list to compare all available tariffs.

  • "Find the nearest CDEK pickup point to Red Square" Uses get_cities to resolve the Moscow city_code, then list_delivery_points with latitude: 55.7539, longitude: 37.6208, radius_km: 5 — results are filtered to the radius and sorted by distance (each annotated with координаты and расстояние_км).

  • "Create an order to send a book from Kazan to Novosibirsk, schedule courier pickup, and print the receipt" Uses create_order, then create_courier_pickup to schedule collection, and print_receipt for the waybill.

Development

git clone https://github.com/theYahia/cdek-mcp.git
cd cdek-mcp
npm install

npm run lint        # ESLint (flat config)
npm run typecheck   # tsc --noEmit
npm run build       # emit dist/
npm test            # unit tests (vitest)
npm run test:e2e    # e2e smoke test (lists tools, no real credentials)

Run the server locally against the CDEK sandbox (api.edu.cdek.ru) — use the shared test pair from Sandbox Mode or your own sandbox keys:

CDEK_SANDBOX=true \
CDEK_CLIENT_ID=<YOUR_SANDBOX_CLIENT_ID> \
CDEK_CLIENT_SECRET=<YOUR_SANDBOX_CLIENT_SECRET> \
npm run dev

See CHANGELOG.md for release notes.

License

MIT

Keywords

mcp

FAQs

Package last updated on 23 Jun 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts