SimpleShop MCP
SimpleShop MCP
Read-only FastMCP server for SimpleShop accounting data.
This server exposes a small MCP tool surface for AI agents that need to audit SimpleShop documents, download document PDFs, inspect products, and review product sales exports before copying data into another accounting system.
It is intentionally read-only. It does not create, update, delete, pay, cancel, send, or mutate SimpleShop records.
Install as a Plugin
simpleshop-mcp ships as a Claude Code / Cowork plugin. In either client:
/plugin marketplace add mikz/simpleshop-mcp
/plugin install simpleshop-mcp@simpleshop-mcpCredentials are configured outside MCP tool calls. Local stdio mode reads
SIMPLESHOP_LOGIN and SIMPLESHOP_API_KEY from environment or .env; remote
HTTP deployments should inject the same names from the platform secret manager.
Requirements on the host machine:
uvxonPATH(install with uv)Python 3.13 (
uvxwill fetch one if missing)
Features
Find SimpleShop documents across invoices, proformas, receipts, orders, tax documents, and related document types.
Default document search is payment-reconciliation oriented: invoices, advance invoices, proformas, payment requests, tax documents, and receipts. Orders are explicit because they often duplicate invoice payment keys.
Batch-download document PDFs, with per-document success/error results.
Find products through the SimpleShop product API.
Fetch and normalize SimpleShop "who bought" product sales exports.
Return metadata useful for accounting filters, including document types, product types, flags, payment methods, number series, and tags.
Use one reusable HTTP client initialized through FastMCP lifespan dependency injection.
Redact customer/buyer PII by default, with explicit opt-in for full data.
Tool Surface
simpleshop_test_login
simpleshop_find_documents
simpleshop_download_documents
simpleshop_find_products
simpleshop_get_product_sales
simpleshop_get_metadatasimpleshop_test_login takes no arguments and is the quickest way to confirm
the current credentials work. It reports not_logged_in when none are available.
Finder tools use a concrete query object with a required mode field:
{
"query": {
"mode": "search"
}
}or:
{
"query": {
"mode": "by_ids",
"ids": [123]
}
}by_ids mode requires IDs and ignores stray search filters so retry calls remain
robust when an agent carries over defaults from schema discovery.
For simpleshop_find_documents, omitting document_types defaults to
settlement/accounting documents used for payment reconciliation. Pass
document_types: ["order"] explicitly for order workflows.
Paid-date search uses paid_from and paid_to, which map to SimpleShop's
date_paid filter expression; pass the same date to both fields for an exact
paid day.
Document results include normalized payment_instructions for intended
receiving-account details and document paid state. They do not include matched
bank transaction evidence.
See TOOLS.md for full schemas, examples, cursor behavior, and privacy controls. The design rationale is in DESIGN.md.
Privacy Defaults
Normal document and sales responses redact customer/buyer PII by default.
Set include_customer_pii: true only when the caller actually needs names,
emails, phone numbers, addresses, company IDs, VAT IDs, custom sales fields, raw
document payloads, or raw CSV exports.
Raw fields are guarded:
include_rawrequiresinclude_customer_pii: true.include_raw_csvrequiresinclude_customer_pii: true.simpleshop_get_product_salessupportsmax_sales_rows,total_rows,returned_rows, andtruncatedfor bounded exports.Public money values are returned as fixed two-decimal strings. When payment instruction account fields are present, they are normalized under
payment_instructions.
Requirements
The project currently pins:
fastmcp[apps]==3.3.0httpx==0.28.1pydantic==2.13.4pydantic-settings==2.14.1
Installation
Using mise:
mise install
mise run syncUsing uv directly:
uv sync --lockedLogin And Configuration
Configure credentials through a local .env, environment variables, or your
remote runtime secret manager. No MCP tool accepts or persists credentials.
To create a local .env:
cp .env.example .envCredential format:
SIMPLESHOP_LOGIN=user@example.com
SIMPLESHOP_API_KEY=replace-with-api-keyOptional:
SIMPLESHOP_BASE_URL=https://api.simpleshop.cz/2.0/
SIMPLESHOP_TIMEOUT_SECONDS=30Do not commit .env or real API credentials.
Running
The plugin's MCP server config lives inline in
.claude-plugin/plugin.jsonand usesuvx --from ${CLAUDE_PLUGIN_ROOT} simpleshop-mcp. No.mcp.jsonis committed at the repo root, so workspace-mode Claude Code sessions in this directory do not try to launch the server. Run it with one of the commands below instead.
Run the MCP server over stdio:
uv run --locked simpleshop-mcpWith the installed script:
uv run --locked simpleshop-mcpRun directly from GitHub with uvx:
SIMPLESHOP_LOGIN=user@example.com \
SIMPLESHOP_API_KEY=replace-with-api-key \
uvx --from git+https://github.com/mikz/simpleshop-mcp.git simpleshop-mcpFor local development with FastMCP reload:
mise run mcpMCP Client Configuration
Example MCP server config:
[mcp_servers.simpleshop]
command = "uv"
args = ["run", "--locked", "simpleshop-mcp"]
cwd = "/path/to/simpleshop-mcp"If you use mise:
[mcp_servers.simpleshop]
command = "mise"
args = ["run", "mcp"]
cwd = "/path/to/simpleshop-mcp"Run from GitHub without cloning:
[mcp_servers.simpleshop]
command = "uvx"
args = ["--from", "git+https://github.com/mikz/simpleshop-mcp.git", "simpleshop-mcp"]Pass credentials through your MCP host environment, not through committed config.
Development
Run tests:
uv run --locked pytestRun lint:
uv run --locked ruff check .Check formatting on touched files:
uv run --locked ruff format --check src testsLive smoke tests are intentionally opt-in because they use real SimpleShop credentials and may expose account data in local logs if run carelessly. See E2E.md.
Repository Layout
src/
client.py SimpleShop HTTP client
models.py Pydantic models for normalized and raw API data
normalization.py Document normalization helpers
server.py FastMCP server and exposed tools
DESIGN.md Tool design rationale
TOOLS.md Tool reference and examples
E2E.md Live smoke-test guidance
tests/ Offline unit and contract testsLicense
MIT. See LICENSE.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/mikz/simpleshop-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server