Back to Browse

Fluf MCP Server

Developer ToolsModerate7.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Manage a FLUF resale account from an AI agent: inventory, crosslisting and unified orders.

About

Manage a FLUF resale account from an AI agent: inventory, crosslisting and unified orders.

Security Report

7.2
Moderate7.2Low Risk

This is a well-structured MCP server with proper authentication, secure credential handling, and appropriate permissions matching its purpose as a FLUF Connect API client. The code demonstrates good security practices including environment-based token loading, proper error handling, and no hardcoded credentials. Minor code quality observations exist but do not raise security concerns. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

7 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Personal access token from https://fluf.io/connect/settings (Developer tab). Requires an active FLUF plan.Required

Environment variable: FLUF_API_TOKEN

Override the API host. Defaults to https://fluf.io.Optional

Environment variable: FLUF_BASE_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-fluf-mcp": {
      "env": {
        "FLUF_BASE_URL": "your-fluf-base-url-here",
        "FLUF_API_TOKEN": "your-fluf-api-token-here"
      },
      "args": [
        "-y",
        "fluf-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

fluf-mcp — FLUF Connect for AI agents

A Model Context Protocol server that lets an AI agent (Claude, Cursor, Windsurf, Cline, and anything else that speaks MCP) work a FLUF Connect account: read inventory, list items across marketplaces, read orders, ask FLUF's own assistant a question, and raise a support ticket.

One account, one token, every marketplace you've connected — the agent never has to learn a per-marketplace API, and never handles your marketplace credentials.

Six tools are the primitives. Five recipes are the outcomes — named workflows that chain the tools in the right order, surfaced in your client as slash commands. Most people want a recipe.

Recipes

Recipes ship as MCP prompts. In Claude Desktop and Claude Code they appear as slash commands; in Cursor and other clients, in the prompt picker.

RecipeOutcomeArguments
dead_stockFinds stock that isn't listed on the channels actually selling for you, ranked by what to crosslist first.period, limit
morning_salesYesterday's trading in ninety seconds: orders, revenue, channel mix, what changed against a fair baseline.date, compare
listing_failuresInvestigates failed and stuck listings, groups them by root cause, and proposes a fix per cause.channel, period
expansionDecides what to seed onto a newly connected marketplace, chosen to match what already sells for you.channel (required), batch_size
supportDiagnoses a problem through Intesa, then files a support ticket with the evidence attached.problem (required)

Every argument is optional unless marked, and every recipe has a sensible default — /dead_stock on its own works.

/dead_stock period="30 days" limit=10
/morning_sales compare=previous_week
/expansion channel=vinted batch_size=25

Two things the recipes are deliberately strict about, because getting them wrong is how an agent loses a seller's trust:

  • Nothing gets listed without confirmation. dead_stock and expansion research and recommend; they call crosslist only after you say yes.
  • Queued is reported as queued. Extension-first channels finish in your own browser, so an item can be accepted but not yet live. The recipes say so rather than claiming success, and they don't re-push (a repeat can duplicate the listing).

Tools

ToolWhat it does
list_channelsWhich marketplaces this account has connected, and which it can list to.
list_productsYour products, with the channels each one is already live on.
crosslistList one or more products on one or more marketplaces.
get_ordersYour orders across every connected marketplace, in one shape.
ask_intesaAsk FLUF's own assistant an open-ended question about your account — why a channel stopped syncing, what a listing error means, what sold and where.
report_bugRaise a bug with FLUF support on your behalf — either when you report a problem, or when the agent itself gets stuck and can't finish the job.

Get a token

Create one at https://fluf.io/connect/developers — in FLUF Connect that's More → Developers in the left sidebar. It's shown once, so store it like a password. Revoke it on the same screen any time.

You need a FLUF Connect account on an active plan; the API is a paid feature.

Install

Two ways in. Pick the first unless you have a reason not to.

Claude Desktop — one click, no Node (recommended)

Download fluf-mcp-<version>.mcpb from the latest release and open it. Claude Desktop shows an install dialog, asks for your token in a form field, and that's it — no terminal, no JSON, and no Node install: Claude Desktop ships its own Node runtime and uses it for installed bundles.

Everything else — npx

For Cursor, Claude Code, Windsurf, Cline, or if you'd rather manage it yourself. This route does need Node 18+ on your machine — the runtime bundled with Claude Desktop is only used for installed .mcpb bundles, not for claude_desktop_config.json entries, which spawn command from your system PATH.

npm install -g fluf-mcp

Configure

Only needed for the npx route — the .mcpb bundle configures itself.

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "fluf": {
      "command": "npx",
      "args": ["-y", "fluf-mcp"],
      "env": { "FLUF_API_TOKEN": "fluf_pat_..." }
    }
  }
}

Claude Code

claude mcp add fluf --env FLUF_API_TOKEN=fluf_pat_... -- npx -y fluf-mcp

Cursor

~/.cursor/mcp.json (or a per-project .cursor/mcp.json):

{
  "mcpServers": {
    "fluf": {
      "command": "npx",
      "args": ["-y", "fluf-mcp"],
      "env": { "FLUF_API_TOKEN": "fluf_pat_..." }
    }
  }
}

Environment variables

VarRequiredDefaultNotes
FLUF_API_TOKENyesYour personal access token.
FLUF_BASE_URLnohttps://fluf.ioOverride for staging.

Using it

Reach for a recipe when you want an outcome — they encode the tool order and the caveats. Otherwise ask in plain language and the agent picks the tools:

"What have I got in stock that isn't on eBay yet? List the ten cheapest."

"Show me everything that sold last week and which channel it sold on."

"Why did my last five Vinted listings fail?"

Three things worth knowing:

  • Always call list_channels first. The available marketplaces differ per account and change over time; don't hardcode a list.
  • crosslist is not always instant. Some channels are handed to your own browser session to complete, so the response may say queued rather than listed. Read the per-channel status; don't assume success.
  • ask_intesa is the slow, clever one. It hands the question to Intesa, the assistant inside FLUF, which runs its own multi-step investigation before answering — so it can explain why something happened, not just report what is. Replies can take up to a minute. Use the direct tools for simple reads; reach for this when the question is diagnostic or open-ended.

Develop

npm install
npm run build
FLUF_API_TOKEN=... node dist/index.js

Smoke-test without an MCP client:

echo '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' \
  | FLUF_API_TOKEN=... node dist/index.js

echo '{"jsonrpc":"2.0","id":1,"method":"prompts/list"}' \
  | FLUF_API_TOKEN=... node dist/index.js

Recipes live in src/prompts.ts — one entry in RECIPES per recipe, no registration step. They're plain text aimed at the agent, so editing one needs no client change.

Support

info@fluf.io

License

MIT — see LICENSE. © FLUF.io.

The server itself is open; the account it talks to is not. You'll still need a FLUF Connect account on an active plan for any of it to do anything.

Reviews

No reviews yet

Be the first to review this server!