gobox-mcp
MCP server wrapping the Gobox Open API (dev-api.gobox.asia/open/api/*) for AI agents, Claude Desktop, and CLI automation.
Features
- ~40 tools covering orders, products, SKU quantities, warehouses, reports, shops, locations, consignments, Goship rates, webhooks
- 5 SKU quantity states: available, in_warehouse, keep_pick, wait_qc, wait_incoming (+ composite
sku_full_status) - Dual transport: stdio (Claude Desktop local) or SSE (Docker shared for bot/team)
- Auto token refresh with in-memory cache
- Modular: each tool group in its own file under
tools/
Setup
1. Credentials
Contact Gobox admin for client_id + client_secret.
2. Install
cd gobox-mcp
python3 -m venv .venv && source .venv/bin/activate
pip install -r requirements.txt
cp .env.example .env
# Edit .env with your credentials
3. Run locally (stdio)
python gobox_mcp.py
4. Run in Docker (SSE)
docker compose up -d
# Test: curl http://localhost:8000/sse
Connect to Claude Desktop
Stdio mode (local)
Edit ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"gobox": {
"command": "/absolute/path/to/gobox-mcp/.venv/bin/python",
"args": ["/absolute/path/to/gobox-mcp/gobox_mcp.py"],
"env": {
"GOBOX_BASE_URL": "https://dev-api.gobox.asia",
"GOBOX_CLIENT_ID": "xxx",
"GOBOX_CLIENT_SECRET": "xxx"
}
}
}
}
SSE mode (Docker)
{
"mcpServers": {
"gobox": {
"url": "http://localhost:8000/sse"
}
}
}
Connect to Claude Code
claude mcp add gobox \
/absolute/path/.venv/bin/python \
/absolute/path/gobox_mcp.py \
-e GOBOX_BASE_URL=https://dev-api.gobox.asia \
-e GOBOX_CLIENT_ID=xxx \
-e GOBOX_CLIENT_SECRET=xxx
Environment switching (dev/prod)
Set GOBOX_BASE_URL to switch:
- Dev:
https://dev-api.gobox.asia - Prod:
https://api.gobox.asia(verify actual prod URL)
Tool catalog
| Module | Tools |
|---|---|
orders_tools |
list_orders, get_order, create_order, update_order, update_order_status, cancel_order, send_order_to_goship |
products_tools |
list_products, get_product, list_categories, list_brands, list_attributes, sku_quantity_available, sku_quantity_in_warehouse, sku_quantity_keep_pick, sku_quantity_wait_qc, sku_quantity_wait_incoming, sku_full_status |
warehouses_tools |
list_warehouses, list_inventories, list_warehouse_pickings |
reports_tools |
report_warehouse_import, report_warehouse_import_refund, report_export_by_order, report_export_by_sku, report_inventories, report_warehouse_store, report_warehouse_stock, report_materials |
shops_tools |
list_shops |
locations_tools |
list_cities, list_districts, list_wards, list_countries, get_sys_helpers |
consignments_tools |
list_consignments, get_consignment, create_consignment, cancel_consignment |
goship_tools |
get_shipping_rates |
webhooks_tools |
list_webhooks, create_webhook, update_webhook, delete_webhook, toggle_webhook |
Example AI queries
"List all Gobox warehouses" "Check stock for SKU ABC123" → calls
sku_full_status("ABC123")"Có bao nhiêu đơn Shopee chưa giao hôm nay?" "Báo cáo nhập kho tháng này"
Troubleshooting
OAuth fails: Verify GOBOX_GRANT_TYPE (default client_credentials). Contact admin if unsure.
FastMCP SSE DNS rebinding error: Add transport_security=TransportSecuritySettings(enable_dns_rebinding_protection=False) to mcp.run() call.
Token expired mid-call: Auto-refresh handles this. If persists, call gobox_auth.clear_cache().
Project structure
gobox-mcp/
├── gobox_mcp.py # Main entry
├── gobox_auth.py # OAuth token cache
├── gobox_client.py # HTTP helper
├── tools/
│ ├── orders_tools.py
│ ├── products_tools.py
│ ├── warehouses_tools.py
│ ├── reports_tools.py
│ ├── shops_tools.py
│ ├── locations_tools.py
│ ├── consignments_tools.py
│ ├── goship_tools.py
│ └── webhooks_tools.py
├── Dockerfile
├── docker-compose.yml
├── requirements.txt
├── .env.example
└── README.md
Metadata
Release files for gobox-mcp 0.1.6
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| gobox_mcp-0.1.6.tar.gz | 27.2 kB | Without provenance | Details for gobox_mcp-0.1.6.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| gobox_mcp-0.1.6-py3-none-any.whl | Python 3 | none | any | Details for gobox_mcp-0.1.6-py3-none-any.whl |
Total release size: 49.6 kB
Release files / gobox_mcp-0.1.6.tar.gz
| Download URL | gobox_mcp-0.1.6.tar.gz |
|---|---|
| Size | 27.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
79e9676a1f20efae7056559738ef1d732f0e0b355a7cf7afa9d1625fd2f6e8d9
|
|
BLAKE2b-256 checksum How to use checksums |
921533362db2b490bed9fc5b5e31715fb45a478bd06ca2c7845fc403d724278c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.11.4 {"installer":{"name":"uv","version":"0.11.4","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Release files / gobox_mcp-0.1.6-py3-none-any.whl
| Download URL | gobox_mcp-0.1.6-py3-none-any.whl |
|---|---|
| Size | 22.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d71fb496b1c28eee85ddc651c1e0064fccfd332b37ab4c57279ea95a41a4e8a3
|
|
BLAKE2b-256 checksum How to use checksums |
7adbefb3287e262cddfb0b368238ced6f10634386d6b3ccc9cd7620e53e791c4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.11.4 {"installer":{"name":"uv","version":"0.11.4","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Security for gobox-mcp 0.1.6
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.