amazon-orders-mcp 1.4.2

amazon-orders-mcp is an unofficial MCP server for Amazon order history, line items, and transactions, built on amazon-orders. It gives your AI assistant tools for your Amazon account, available from Claude and any other MCP client.

The server never sees your credentials. When you sign in, a browser window opens on Amazon's own page, and the server reuses the session that leaves behind. Signing in needs a display, so run the server on the machine you sign in on. On a machine without one, like a server or a container, sign in with amazon-orders instead, as shown in Running in a Container.

Note: This server reads its data through amazon-orders, which works by parsing data from Amazon's consumer-facing website. As Amazon provides no official API to use, older versions may break at any time, so it's recommended that you use the latest version.

Installation

amazon-orders-mcp is available on PyPI and is run with uvx, so there's nothing to install up front. Add it to your AI assistant:

Claude

Claude Desktop: download amazon-orders-mcp-<version>.mcpb from the latest release and open it.

Claude Code:

claude mcp add amazon-orders -- uvx amazon-orders-mcp

ChatGPT

ChatGPT Desktop: in Settings → Plugins, add an MCP server of type STDIO, with uvx as the command and amazon-orders-mcp as its argument.

Codex:

codex mcp add amazon-orders -- uvx amazon-orders-mcp

Other Clients

Any client that runs local MCP servers can use this JSON, or amazon-orders-mcp as the command if you've installed it with pip install amazon-orders-mcp:

{
  "mcpServers": {
    "amazon-orders": {
      "command": "uvx",
      "args": ["amazon-orders-mcp"]
    }
  }
}

Remote Clients

For clients that connect to a server instead of running one, the server can also serve Streamable HTTP:

uvx amazon-orders-mcp --transport streamable-http

It listens at http://127.0.0.1:8000/mcp (change that with --host and --port), and answers GET /health with ok, without calling Amazon, for health checks. A call's progress is reported on an event stream, unless --json-response is passed, which answers each request with JSON instead, for a proxy that doesn't stream.

Warning: Anyone who can reach the server can use its tools with the Amazon account it's signed in to. On a loopback address (127.0.0.1, localhost or ::1), only requests addressed to one of them are accepted, so a proxy on the same machine must pass that as the Host.

To have the server check a bearer token, put it in a file and pass --token-file <path>, or set AMAZON_ORDERS_MCP_TOKEN. Every request but /health must then carry Authorization: Bearer <token>. Any other --host (e.g. 0.0.0.0 in a container) requires a token.

sign_in still opens its browser window on the machine the server runs on.

Basic Usage

Just ask your assistant about your orders, and it will use the following tools:

Order history and transactions come back in batches of limit results (25 by default, and a batch can run up to a page over), with a cursor your assistant passes back to get the next batch.

Every tool that reads Amazon takes an optional site, like amazon.de, so your assistant can read each Amazon site you shop on from one server, e.g. "my last amazon.de orders". Without it, tools read your default site, the domain setting.

Configuration

Ask your assistant to change a setting, such as the default Amazon site (e.g. amazon.co.uk) or the browser to sign in with. Settings are shared with the amazon-orders CLI, so it follows the same changes. See Supported Sites for the sites amazon-orders can read.

Several Amazon Sites

Each Amazon site has its own orders and its own sign-in, so the server keeps a saved session for each site you sign in to. Ask your assistant to sign you in to a site, and it calls sign_in with that site. check_session reports each site you have a session for, and a site that can't be checked doesn't hide the others.

amazon-orders keeps each site's session in its own cookie jar (cookies.json for amazon.com, and e.g. cookies.amazon.de.json beside it), so to sign in to another site from a terminal, run amazon-orders --domain amazon.de login --browser. Changing the default site signs you out of nothing. Every other setting applies to every site.

Two settings keep the server to one site. An AMAZON_DOMAIN environment variable outranks every other setting, so every call reads its site. And with an explicit cookie_jar_path, every site would share one cookie jar. To read several sites, set the default site with the domain setting, and leave cookie_jar_path unset.

Running in a Container

The server can also run in a container, e.g. on a home server, built from this repository's Dockerfile:

docker build -t amazon-orders-mcp .

The image runs the server over stdio, as a non-root user (UID 1000), and keeps its config and saved session in /home/app/.config/amazonorders. Put that on a volume, which the server and the sign-in below share (a directory mounted there instead must be writable by UID 1000):

docker run -i --rm -v amazon-orders:/home/app/.config/amazonorders amazon-orders-mcp

To serve remote clients instead, listen on all of the container's interfaces. That needs a bearer token, which a reverse proxy in front can add:

docker run -d -p 127.0.0.1:8000:8000 -e AMAZON_ORDERS_MCP_TOKEN -v amazon-orders:/home/app/.config/amazonorders \
    amazon-orders-mcp --transport streamable-http --host 0.0.0.0

There's no display in a container, so sign_in can't open a browser window there. Instead, sign in with amazon-orders login, in a one-off container on the same volume. It runs from the login image, which adds the Chromium that amazon-orders uses to clear Amazon's JavaScript challenges while signing in (the server's image has no browser, since the server only uses the saved session):

docker build --target login -t amazon-orders-login .
docker run -it --rm -v amazon-orders:/home/app/.config/amazonorders amazon-orders-login

It asks for your username and password, and a one-time passcode if your account has two-step verification. login signs out of a saved session first, and the server uses the new session on its next call, without a restart.

To sign in without being asked, e.g. from a script that signs in again when the session expires, give your credentials to that one-off container with automated authentication (-e AMAZON_USERNAME -e AMAZON_PASSWORD -e AMAZON_OTP_SECRET_KEY). Never give them to the server's container, which only needs the saved session.

Documentation

For more on the data the server returns, amazon-orders's official documentation is available at Read the Docs, including the Order entity's fields and troubleshooting.

Contributing

Want to contribute financially? If you've found amazon-orders-mcp useful, sponsorship would be greatly appreciated!