An MCP server providing AI assistants comprehensive access to eBay's Sell APIs for inventory management, order fulfillment, marketing, analytics, and more, with hosted multi-user and local modes.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning
Axios: Excessive recursion in formDataToJSON can cause denial of service
Axios: Nested axios option objects can consume polluted prototype values
Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios
Axios form serializer maxDepth bypass via {} metatoken
process.env. You'll be asked to provide them before it can run.ADMIN_API_KEY— Privileged admin bypass: Authorization: Bearer <> when ADMIN_API_KEY is configuredAIRTABLE_API_KEYAIRTABLE_BASE_IDAIRTABLE_ITEM_TABLE_IDAIRTABLE_PATAIRTABLE_VALIDATION_TABLE_IDAWS_EXECUTION_ENVCLOUDFLARE_ACCOUNT_ID— required when backend is cloudflare-kvCLOUDFLARE_API_TOKEN— required when backend is cloudflare-kvCLOUDFLARE_KV_NAMESPACE_ID— required when backend is cloudflare-kvDISABLE_DOTENVXDISPLAYEBAY_APP_ACCESS_TOKENEBAY_CLIENT_ID— your_client_idEBAY_CLIENT_SECRET— your_client_secretEBAY_CONFIG_FILE— Required eBay credentials unless provides themEBAY_CONTENT_LANGUAGE— en-US # optional, defaults to en-USEBAY_CURRENCY_CONVERSION_ENABLEDEBAY_CURRENCY_RATES_TO_USD_JSONEBAY_DEFAULT_ENVIRONMENT— production # fallback when EBAY_ENVIRONMENT is unsetEBAY_DEFAULT_FULFILLMENT_POLICY_IDEBAY_DEFAULT_PAYMENT_POLICY_IDEBAY_DEFAULT_RETURN_POLICY_IDEBAY_ENABLE_FILE_LOGGING— true # write logs to filesEBAY_ENVIRONMENT— sandbox # or productionEBAY_LOCAL_TLS_CERT_PATH— /path/to/ebay-local.test.pemEBAY_LOCAL_TLS_KEY_PATH— /path/to/ebay-local.test-key.pemEBAY_LOG_LEVEL— debug # error warn info debugEBAY_MARKETPLACE_ID— EBAY_US # optional, defaults to EBAY_USEBAY_MCP_BASE_URLEBAY_PRODUCTION_CLIENT_IDEBAY_PRODUCTION_CLIENT_SECRETEBAY_PRODUCTION_REDIRECT_URIEBAY_PRODUCTION_RUNAMEEBAY_REDIRECT_URI— legacy env name; do not set to the public callback URLEBAY_RESEARCH_BOOTSTRAP_MARKETPLACEEBAY_RESEARCH_COOKIES_JSONEBAY_RESEARCH_LIVE_PID_PATHEBAY_RESEARCH_LIVE_SEED_STORAGE_STATE_PATHEBAY_RESEARCH_LIVE_STORAGE_STATE_PATHEBAY_RESEARCH_PROFILE_DIREBAY_RESEARCH_SESSION_ALERTS_ENABLEDEBAY_RESEARCH_SESSION_ALERT_CALLBACK_URLEBAY_RESEARCH_SESSION_ALERT_ON_EXPIREDEBAY_RESEARCH_SESSION_ALERT_WINDOW_24HEBAY_RESEARCH_SESSION_ALERT_WINDOW_6HEBAY_RESEARCH_SESSION_ALLOW_FILESYSTEM_FALLBACKEBAY_RESEARCH_STORAGE_STATE_META_PATHEBAY_RESEARCH_STORAGE_STATE_PATHEBAY_RESEARCH_TIMEZONEEBAY_RUNAME— your_runame_string # eBay-generated RuName, not a URLEBAY_SANDBOX_CLIENT_IDEBAY_SANDBOX_CLIENT_SECRETEBAY_SANDBOX_REDIRECT_URIEBAY_SANDBOX_RUNAMEEBAY_SOLD_SEARCH_HTML_ENABLEDEBAY_SOLD_SEARCH_HTML_TIMEOUT_MSEBAY_SOLD_SEARCH_HTML_TRANSPORTEBAY_SOLD_SEARCH_USER_AGENTEBAY_TOKEN_STORE_BACKEND— upstash-redis # cloudflare-kv upstash-redis memoryEBAY_TOKEN_STORE_PATHEBAY_USERNAMEEBAY_USER_ACCESS_TOKENEBAY_USER_REFRESH_TOKEN— populated by setup wizardENABLE_NOVNCK_SERVICEMCP_HOST— 0.0.0.0 # defaults to 0.0.0.0MCP_TOOL_TIMEOUT_MSN8N_VALIDATION_RUNNER_RECORD_WEBHOOK_URLN8N_VALIDATION_RUNNER_WEBHOOK_URLNIXPACKSNIXPACKS_METADATANOVNC_DISPLAYNOVNC_PASSWORD_FILENOVNC_PORTNOVNC_PUBLIC_HOSTNOVNC_PUBLIC_PORTNOVNC_PUBLIC_PROTOCOLNOVNC_PUBLIC_URLOAUTH_START_KEY— optional gate for /oauth/startPERPLEXITY_API_KEYPERPLEXITY_RESEARCH_ENABLEDPLAYWRIGHT_CHROMIUM_CHANNELPORT— 3000 # defaults to 3000; many hosts inject thisPUBLIC_BASE_URLQSTASH_CURRENT_SIGNING_KEYQSTASH_NEXT_SIGNING_KEYQSTASH_TOKENQSTASH_URLRAPIDGATE_API_KEYRAPIDGATE_API_URL— Sold-data provider is temporary (external API via )REDDIT_USER_AGENTRENDERRESEARCH_CAPTURE_HEADLESSRESEARCH_CAPTURE_OUTPUT_DIRSESSION_TTL_SECONDS— 2592000 # default: 30 daysTELEGRAM_BOT_TOKENTELEGRAM_CHAT_IDTWITTER_BEARER_TOKENTWOCAPTCHA_API_KEYUPSTASH_REDIS_REST_TOKEN— required when backend is upstash-redisUPSTASH_REDIS_REST_URL— required when backend is upstash-redisVALIDATION_AIRTABLE_BASE_IDVALIDATION_AIRTABLE_ITEM_TABLE_IDVALIDATION_AIRTABLE_TABLE_IDVALIDATION_RUNNER_RECORD_WEBHOOK_URLVALIDATION_RUNNER_USER_ID— Both require X-Admin-API-Key: <ADMIN_API_KEY>. The server impersonates the configured validation runner user from env vars.VALIDATION_RUNNER_USER_ID_PRODUCTIONVALIDATION_RUNNER_USER_ID_SANDBOXVALIDATION_RUNNER_WEBHOOK_URLVERCELYOUTUBE_API_KEY[](https://m8ven.ai/mcp/mrnajiboy-ebay-mcp-remote-edition-1idmii)