MercadoLibre MCP Server

Item: MercadoLibre MCP Server
Rating: 69
Author: M8ven

Connects Claude to your MercadoLibre seller account, enabling natural language management of listings, orders, and shipments.

→ eme-ce/mcp-mercadolibre · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 4 credentials: BEARER_TOKEN, ML_ACCESS_TOKEN, ML_REFRESH_TOKEN, ML_CLIENT_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configML_CLIENT_ID— 4. Guardá la app y copiá tu App ID (esto es ) y Secret key (ML_CLIENT_SECRET)

configML_SITE— Apunta a MLA (Argentina) por defecto. Cambiá para otros mercados.

configTOKEN_REFRESH_BUFFER— No 1800 Segundos antes del vencimiento del token para disparar una renovación

🔐 secretBEARER_TOKEN— pick-a-long-random-string-here

configALLOW_TOKEN_QUERY_PARAM— No 1 — solo si Claude.ai no puede enviar headers de Authorization

configMAX_REQUEST_BODY— No 1048576 Tamaño máximo del cuerpo de la request entrante, en bytes (1 MB)

configPORT— No 8000 Puerto en el que escucha el servidor

configRATE_LIMIT_RPM— No 60 Máximo de requests por minuto por IP

configRATE_LIMIT_MAX_IPS— No 10000 Máximo de IPs rastreadas por el limitador de tasa

configTRUSTED_PROXY_COUNT— No 1 Cantidad de proxies inversos delante del servidor

configALLOW_OPEN_SERVER

🔐 secretML_ACCESS_TOKEN— 4. El servidor registra y ML_REFRESH_TOKEN en la consola

🔐 secretML_REFRESH_TOKEN— 4. El servidor registra ML_ACCESS_TOKEN y en la consola

🔐 secretML_CLIENT_SECRET— 4. Guardá la app y copiá tu App ID (esto es ML_CLIENT_ID) y Secret key ()

configML_REDIRECT_URI— ✅ https://your-app.up.railway.app/auth/callback

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/eme-ce-mcp-mercadolibre-155bfe)](https://m8ven.ai/mcp/eme-ce-mcp-mercadolibre-155bfe)

commit: dcbe73bf47d6a7fd5bd48a105fbea7d4d8053d74

code hash: ff8af53fd214103660baa7938f188ca085d0aba622e61aea7a460d949fbb3e3b

verified: 7/27/2026, 10:25:08 AM

view raw JSON →