@hertwill/mcp

A Model Context Protocol server that wraps the Hertwill dropshipping API — letting any MCP-capable AI agent discover products, evaluate margins, manage an import list, and trigger syncs to Shopify/WooCommerce through natural language.

npx @hertwill/mcp

Quick Start

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "hertwill": {
      "command": "npx",
      "args": ["@hertwill/mcp"],
      "env": {
        "HERTWILL_API_KEY": "your-api-key-here"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json in your project root:

{
  "mcpServers": {
    "hertwill": {
      "command": "npx",
      "args": ["@hertwill/mcp"],
      "env": {
        "HERTWILL_API_KEY": "your-api-key-here"
      }
    }
  }
}

VS Code + Copilot

Add to .vscode/mcp.json:

{
  "servers": {
    "hertwill": {
      "type": "stdio",
      "command": "npx",
      "args": ["@hertwill/mcp"],
      "env": {
        "HERTWILL_API_KEY": "your-api-key-here"
      }
    }
  }
}

Cline / Continue / Windsurf

Each follows the same pattern — add an MCP server entry pointing to npx @hertwill/mcp with the HERTWILL_API_KEY env var. Refer to your client's MCP configuration docs.

No API key? The server starts without one. All 6 discovery tools work immediately — you only need a key for import list and sync operations. Get one at hertwill.com.

What You Can Ask

Once connected, talk to your AI agent naturally:

• "Find me winning EU-shippable kitchen gadgets under €25"

• "Evaluate product 4827 — is the margin viable for Facebook ads?"

• "Show me trending pet supplies with at least 60% margin potential"

• "Add products 1001, 1002, 1003 to my import list"

• "What's the health of my store connection?"

Tools (12)

Discovery (no API key required)

Import & Sync (API key required)

Prompts (8)

Pre-built workflows the agent can invoke as structured starting points:

Resources (5)

Static and dynamic context the agent can read:

Configuration

Troubleshooting

"Parse error" or garbled output from the MCP client

Cause: Something is writing to stdout besides JSON-RPC frames. Common culprits: an npm lifecycle script printing a banner, or a stray console.log in a dependency.

Fix: Ensure you're using npx @hertwill/mcp directly (not wrapping it in a shell script that echoes). Logs go to stderr, never stdout.

"Unauthorized" or "Invalid API key format"

Cause: The HERTWILL_API_KEY env var is missing, empty, or doesn't match the hw_live_... / hw_test_... format.

Fix: Check the key is set in your MCP client config (not your shell profile — MCP servers don't inherit your shell environment). Get a key at hertwill.com.

"Rate limit exceeded. Retry after Xs."

Cause: You've hit the Hertwill API rate limit (60 req/min public, 300 req/min authenticated).

Fix: The server handles backoff automatically. Wait for the indicated retry period. If you're hitting limits frequently, batch your requests — use hw-import-batch instead of individual add_to_import_list calls.

Development

# Install dependencies
pnpm install

# Run in development
pnpm tsx src/index.ts

# Run tests (436 tests)
pnpm test

# Build
pnpm build

# Full validation (build + lint + security gates + tests)
pnpm validate

Security Gates

The validate script includes four security gates that run in CI:

• check:key-reads — process.env.HERTWILL_API_KEY accessed only in src/config.ts

• check:key-leakage — no full-length API key values in the source tree

• check:boundaries — import boundary enforcement between layers

• audit — pnpm audit --audit-level=high passes with zero high-severity CVEs

Tech Stack

• Runtime: Node.js >= 20.11, ESM-only

• MCP SDK: @modelcontextprotocol/sdk ^1.29

• Validation: Zod v4

• HTTP: Native fetch + openapi-fetch (typed, 6 KB)

• Rate limiting: Bottleneck (60/min public, 300/min authenticated)

• Retry: p-retry with exponential backoff + jitter

• Logging: Pino to stderr (stdout reserved for JSON-RPC)

• Build: tsup (ESM bundle with shebang)

• Testing: Vitest + MSW + in-process MCP client

License

MIT