Amazon MCP

Read this first

• Not affiliated with Amazon. "Amazon" is a trademark of Amazon.com, Inc., named only to describe what this works with.

• Amazon's Conditions of Use apply to you, and they restrict automated access. Amazon may challenge, sign out or block agents like this one. Use it for your own shopping, at human pace, at your own risk.

• Nothing is bought without your confirmation. See How buying works.

• No warranty. MIT licensed; see LICENSE and TERMS.md.

What you can ask

• "Find me good gel pens under $15 and add the best one to my cart"

• "What's in my cart?" / "Remove the stapler"

• "Find this shirt" (with a photo) → "medium, navy" → "add it"

• "Buy the ticked items" → you approve the order in a confirmation

• "Where's my package?" / "Reorder the coffee filters"

• "Tell me when the Lamy Safari drops under $25"

In apps that support MCP Apps (Claude on the web, desktop and phone, ChatGPT, VS Code), results show as cards with photos and + Cart, Details, size and colour pickers, and a checkout card. Elsewhere you get text and images.

Related MCP server: Amazon MCP Server

Install

You need Bun (curl -fsSL https://bun.sh/install | bash).

Claude Code

claude mcp add -s user amazon -- bunx @frostn/amazon-mcp

Claude Desktop (Settings → Developer → Edit Config), Cursor (~/.cursor/mcp.json) and most other apps:

{
  "mcpServers": {
    "amazon": {
      "command": "bunx",
      "args": ["@frostn/amazon-mcp"]
    }
  }
}

If the app can't find bunx, use its full path: ~/.bun/bin/bunx, written out as /Users/you/.bun/bin/bunx.

Sign in once. Ask your agent to "sign me in to Amazon", or run:

bunx @frostn/amazon-mcp signin

A browser window opens on Amazon's real sign-in page and you sign in there. The agent never sees your password. Before the first sign-in, install the browser it uses:

bunx playwright install chromium

Without a sign-in, everything works on an anonymous guest cart. That cart moves into your account cart when you sign in.

Use it from your phone

Claude on the phone can't start programs on your computer, so the computer runs the server and the phone connects to it.

1. On your computer, install cloudflared (brew install cloudflared), then run:

   bunx @frostn/amazon-mcp serve

2. It prints a URL like https://something.trycloudflare.com/mcp/3f9c….

3. On claude.ai, open Settings → Connectors → Add custom connector and paste the URL.

4. It now works in the Claude iPhone and Android apps too. To sign in from the phone, ask Claude to "sign me in to Amazon". You get a one-time link to Amazon's real sign-in page.

Good to know:

• The URL is the key. It contains a random secret, and every other path returns 404. Don't share it. serve --new-url makes a new one, after which you update the connector.

• The computer must stay on and awake while you use it, with the window open.

• The address changes on restart with the free quick tunnel. For a fixed one, point your own URL at the port and pass it in. For example, with Tailscale Funnel:

  tailscale funnel 8765

  bunx @frostn/amazon-mcp serve --public-url https://your-mac.your-tailnet.ts.net

  A named Cloudflare tunnel or your own server works the same way. --port picks the local port (default 8765), and --local skips the tunnel.

How buying works

The agent can ask to buy, but only you can say yes.

1. The agent ticks the cart items and calls amazon_order_buy. It reads Amazon's real order page: items, address, card (brand and last 4 digits), delivery and total.

2. Your app shows you a confirmation with those details. The order is placed only if you accept it there. The first time, you also accept TERMS.md.

3. Some apps can't show a confirmation (for example, the Claude Code tab). Then the order card shows a 6-digit code that only you can see, because the code never goes to the model. You type "confirm 123456" in the chat. The code works once, lasts 10 minutes and allows 3 tries.

4. Before placing anything it re-reads the order page. If the total or the items changed, it stops. It sends exactly one place-order request.

You can always cancel in Amazon → Your Orders. Everything else (search, cart, orders, tracking, price watch) never buys.

Tools

Command line

Every tool has a command too:

bunx @frostn/amazon-mcp search fountain pen --max 30

bunx @frostn/amazon-mcp cart view

bunx @frostn/amazon-mcp help

Add --json for raw data.

Privacy and identification

• Your session lives in ~/.amazon-agent/session.json (mode 600) on your computer. Nothing is sent anywhere except Amazon, plus the tunnel when you use serve or the sign-in link.

• Every request says it comes from an AI shopping agent: amazon-mcp/1.0 (AI shopping agent; +https://github.com/Frostn1/amazon-mcp) is added to the user agent. It never pretends to be a person. You can change the text with AMAZON_AGENT_TAG.

• It never tries to get past a CAPTCHA or bot check. If Amazon challenges a request, it says so and stops.

• Requests are throttled to human pace.

Sign-in options

• Window (default when you're at the computer): a visible Chromium window on Amazon's sign-in page.

• Link (default in serve mode; set AMAZON_SIGNIN_LINK=on for stdio): a one-time link to a live view of Amazon's sign-in page running on your computer, so you can sign in from your phone.

  • It's a 256-bit token. It expires in 10 minutes and locks to the first device that opens it.

  • The remote browser can only open Amazon pages.

  • Everything closes once you're signed in.

  • It needs cloudflared, or set AMAZON_SIGNIN_PUBLIC_URL / AMAZON_SIGNIN_PORT to your own URL.

• Keep-alive: Amazon rotates session tokens, and each rotation is saved. An idle session is refreshed after 12 hours. When a sign-in really expires, the agent tells you and offers a new link.

Settings

Development

git clone https://github.com/Frostn1/amazon-mcp && cd amazon-mcp && bun install

bun test

bun run smoke

bun run view

• bun test runs offline tests on hand-made page fixtures.

• bun run smoke is a live check of the MCP tools on a guest session.

• bun run view previews the cards at http://127.0.0.1:4877/.

• API_MAP.md documents the Amazon web endpoints it uses.

Amazon changes its pages often. If something breaks, open an issue with the command you ran and the error.

License

MIT. Not affiliated with, endorsed by or sponsored by Amazon.