limonene-mcp

DSH PLUGIN浏览器与联网

仓库 m-abozaid/limonene-mcp

浏览器与联网 未标注验证等级 安全审查:未标注 可信度:未标注 可安装插件

把 Amazon 卖家账户接入 DeepSeek Harness 等 AI 客户端的只读 MCP 连接器,可查询销量、Buy Box、FBA 库存、告警与费用。

一句话选型结论

按资料字段整理

limonene-mcp 是浏览器与联网类的 DSH 可安装插件,未做沙盒验证,暂无安全审查结论,列出 5 项功能,没有现成安装命令,需要按仓库 README 接入。验证通过不等于安全:插件会读写文件、执行命令或联网,装前先到仓库确认它做了什么;涉及密钥或系统权限的,建议先在隔离环境试装。

分类浏览器与联网 收录类型可安装插件 验证等级未标注验证等级 安全审查未标注
验证等级 UNKNOWN 未标注验证等级
GitHub 星标 0 复刻 0 · 未关闭 issue 0
最近更新 2026-09-20 创建于 2026-09-17
README 6.5 KB 正文体量,越大说明说明书写得越细

安装

可安装插件
在 DSH 里执行,装完用 dsh plugin list 确认已挂上;标了 L4 / L5 的命令已在沙盒里真实跑通
  1. 1
    确认版本与运行环境

    仓库没有标注兼容版本与 Node.js 要求,先确认你的 DSH 版本能装,再继续。

  2. 2
    执行安装命令

    在 DSH 里执行上面的命令;多包仓库要注意区分具体子包名,别装错包。

  3. 3
    确认已挂载

    用 dsh plugin list 查看列表里是否出现这个插件,出现即挂载成功。

  4. 4
    试跑并检查权限

    加载后跑一个最小用例,确认它能正常工作;同时看它申请了哪些文件、命令或网络权限。

兼容 DSH 版本未标注版本不匹配时安装会报错
Node.js 要求未标注来自仓库 package.json 的 engines 字段
前置依赖无需要同时安装的同级依赖
npm 包名未发布到 npm可用 npm view 查看包信息

能做什么

5 项功能
字段来自项目仓库与公开索引,中文说明由本站标注

limonene-mcp:把 Amazon 卖家后台数据接进 DeepSeek Harness 的只读连接器

  • 只读查询销量与趋势
  • Buy Box 与定价观察
  • FBA 库存健康检查
  • 告警与利润费用拆解
  • OAuth 授权按店隔离

上游标签

ai-agentamazonamazon-fbaamazon-sellerchatgptclaudeclaude-mcpdeepseek-harnessdsh-pluginecommercemcpmcp-servermodel-context-protocolsp-api

验证等级与安全审查

未标注验证等级
自动化流程结论,不是人工审核
验证等级未标注验证等级上游未给出验证结论,安装前请自行确认
安全审查未标注静态分析结论,未标注不代表已通过审查
仓库健康度未标注按仓库活跃度与最近更新时间给出
可信度未标注综合仓库活跃度与验证结果

选择建议

装之前先看这几条
按条目字段给出的判断,不替你决定用不用

值得选的地方

  • 列出了 5 项功能,能直接看出它解决什么问题。

先想清楚的地方

  • 安全审查还没结论,装之前先看仓库改了什么、要什么权限。
  • 没有现成安装命令,要按仓库 README 手动接入。
  • 验证通过不等于安全:插件会读写文件、执行命令或联网,装前先到仓库确认它做了什么。

更适合

  • 需要在浏览器与联网场景里给 DSH 补能力的人。
  • 能接受在本地装依赖、愿意自己确认权限的人。

不太适合

  • 只使用 DSH 官方内置能力、不接受第三方插件的人。

同类对比

6 个同类
同分类里挑最接近的几条,字段以各自详情页为准
插件验证等级安全审查星标兼容版本安装命令
limonene-mcp当前 未做沙盒验证 未标注 0 未标注 无
dsh-our-free-model L3 · 安装规范通过 低风险 8,796 未标注 有
dsh-web L3 · 安装规范通过 低风险 8,549 未标注 无
BrowserSkill L4 · 沙盒安装通过 低风险 8,456 未标注 有
dsh-pocket L5 · 运行验证通过 低风险 1,656 0.2.0-rc.2 等 12 个 有
Browser4 L4 · 沙盒安装通过 中风险 1,152 未标注 有

仓库档案

浏览器与联网
字段来自项目仓库与公开索引,中文说明由本站标注
作者 / 维护方m-abozaid仓库 limonene-mcp · 默认分支 main
分类浏览器与联网web-tools
收录类型可安装插件声明了 dsh.bundle、可用 dsh plugin add 安装的条目
开发语言未标注仓库主语言
许可证MIT商用或二次分发前请确认条款原文
星标 / 复刻 / issue0 / 0 / 0收录时的数值,非实时
创建 / 更新2026-09-17 · 2026-09-20最后推送 2026-09-20
本站收录2026-09-21首次进入本站目录的时间

README 全文

6.5 KB
作者原文,中文版优先;只做安全转义,不改内容

Limonene AI connector

Amazon seller investigations through ChatGPT, Claude and compatible MCP clients. Basic connections expose six read-only tools. Separately consented management access supports additional analysis and approved actions; the initial read-only Claude directory listing is public and expanded management metadata is in review.

Endpoint: https://limonene.app/api/mcp
Setup and permissions: https://limonene.app/connect-ai
Revoke connections: https://limonene.app/api/mcp/connections
Privacy: https://limonene.app/privacy

Claude listing: https://claude.ai/directory/limonene. Its approved description currently covers six read-only tools; the expanded listing update is in review. The separate Claude Code/Cowork plugin and OpenAI submissions remain in review.

Connection

  1. Sign in to Limonene and connect an Amazon store. Complete its initial sync.
  2. Add the endpoint as a custom remote connector in your AI client (account/workspace support varies).
  3. Authenticate in the browser. Read the client name and callback origin, select a store and choose Read only or Read and manage. Management requires a separate acknowledgment and approval before each change.
  4. Ask: “Review my last seven days. What deserves investigation? Cite sources, dates, and limitations.”

Claude Code: claude mcp add --transport http limonene https://limonene.app/api/mcp, then use /mcp to authenticate.
The package includes separate OpenAI and Claude manifests referring to the same remote server; there is no local executable and no credential embedded in the package.

Basic tools

  • get_store_overview: bounded marketplace-local sales window.
  • get_open_insights: dated existing alerts, capped at 25.
  • get_pricing_and_buybox: cached observations for up to 20 SKUs; no price edits.
  • get_inventory_health: FBA-only inventory, optional SKU.
  • get_sales_trend: SKU history for 1–60 days.
  • get_profit_breakdown: revenue/fees and available cost-coverage information; do not label fees-only figures net profit.

The six-tool basic connection excludes changes and buyer contacts. Choosing Read and manage in a compatible client enables up to 57 tools, depending on store feature availability, including approved prices, listings, repricing rules and schedules. Advertising changes and paid reimbursement filing are excluded. DeepSeek’s current package is a read-only pilot.
Each grant is bound to one store and its active marketplace; reads fail closed while a different marketplace is active. To read that marketplace, reconnect.
Results use the existing capability caches and may trigger their normal background refresh. The external AI generates the answer; this connector does not run a second Limonene model call or debit chat credits.
First-party telemetry records connection, revocation, tool name, success and duration; it does not log prompts, arguments, tokens or tool results. Existing billing remains advisory under the current app policy. This release does not introduce a paid gate or promise unlimited access. Limits: 60 MCP requests/minute/store plus the existing IP ceiling.

Privacy and security

OAuth authorization code flow with mandatory S256 PKCE and resource binding. Public clients register with token_endpoint_auth_method: none. Access tokens expire after one hour; refresh tokens rotate and expire after 30 days. Tokens/codes/browser nonces are stored hashed. Consent requests expire after ten minutes and codes after one minute. Ownership, connection health, revocation and marketplace are rechecked on access. Product and alert text are untrusted data.

The AI service receives the requested store results under the seller's authorization. Its own data policies apply. Revocation blocks subsequent reads, not copies already retained by that service. Account deletion removes grants and their token/code records.

GitHub Copilot in VS Code

Copy vscode.mcp.json to your workspace as .vscode/mcp.json, then start the server from VS Code and complete the browser authorization. Your editor must support remote HTTP MCP and OAuth. This configuration is for GitHub Copilot in VS Code; it is not a Microsoft 365 Copilot marketplace listing.

Installation package

This repository contains public connector configuration and documentation only. The hosted Limonene service is separate. No API key is required in these files; each user signs in and grants access to their own store.

A Limonene account and a connected, synchronized Amazon store are required. Availability and pricing: https://limonene.app/pricing. Do not connect a customer store for platform review; use a dedicated review account.

Pilot status

The remote endpoint is live. Six read tools have passed MCP Inspector against the isolated live reviewer account; the original ChatGPT read workflows were also tested. OpenAI and the Claude Code/Cowork plugin are under review. The six-tool Claude connector is published. All 57 tools passed live MCP Inspector sample checks, and Claude completed a fictional inventory → price preview → explicit approval → simulated completion workflow. Four MCP prompts were listed and retrieved. This is not evidence that every real Amazon workflow has been exercised. Installing this package does not imply endorsement by any platform.

Support: hello@limonene.app
Setup: https://limonene.app/connect-ai
Terms: https://limonene.app/terms
Privacy: https://limonene.app/privacy

The MIT license applies only to files in this public connector package, not to the hosted service or its backend.

DeepSeek Harness

A pinned OAuth bridge and DSH bundle are available. See DeepSeek setup and validation boundaries. This is a community developer integration, not a consumer DeepSeek chat-app listing.

Management workflows

With explicit Read and manage consent, up to 57 tools cover product and order analysis, inventory/inbound, listings, pricing and repricing, costs, reimbursement evidence, available ads analysis, schedules, structured queries and seller notifications. See management permissions and operations.

Four MCP prompts guide multi-step work: weekly_store_review, pricing_change_plan, inventory_action_plan and listing_improvement_plan. Every action uses a frozen preview, explicit approval and a tracked operation. Scheduled analyses use Limonene AI credits; approved schedules and repricing rules may continue after disconnecting.

The Claude plugin manifest is version 0.2.0 for direct installation. It does not mean the separate plugin marketplace review has approved that version. DeepSeek Harness remains a read-only pilot.

常见问题

7 问
答案由本站依据条目字段整理,不引用上游原文
limonene-mcp 怎么安装?

本站没有抓到该条目的安装命令,请到仓库主页确认安装方式;这类条目多数是生态应用或尚未发布安装包的项目。

limonene-mcp 的验证等级是什么意思?

未标注验证等级。上游未给出验证结论,安装前请自行确认

limonene-mcp 安全吗?

未标注。

limonene-mcp 装之前要先确认什么?

先看它会读写哪些文件、执行哪些命令、连接哪些网络地址;验证等级只说明装得上、跑得起来,不等于安全。涉及密钥或系统权限的,建议先在隔离环境试装。

limonene-mcp 用的是什么许可证?

上游标注为 MIT。商用或二次分发前请到仓库确认许可证原文。

limonene-mcp 有哪些功能?

只读查询销量与趋势、Buy Box 与定价观察、FBA 库存健康检查、告警与利润费用拆解、OAuth 授权按店隔离。

这条记录的数据可靠吗?

本站按仓库名去重后合并整理,字段以作者仓库与 npm 元数据为准;安装命令、仓库地址与 README 保持原文,带 L4 / L5 标记的安装命令已在隔离沙盒里真实跑通。

浏览器与联网
按星标排序,可作替代方案

dsh-our-free-model

dsh-our-free-model

在 DeepSeek Harness 中装上这个 DSH plugin,无需登录、注册或填 API Key,即可直接调用 DeepSeek

L3 · 安装规范通过 8,796 星

dsh-web

dsh-web

侧边栏多列任务看板:卡片交给真实 DSH 智能体会话执行,支持 cron 定时(Host 侧到点执行,关浏览器也生效)。

L3 · 安装规范通过 8,549 星

BrowserSkill

BrowserSkill

BrowserSkill 的 DeepSeek Harness 浏览器自动化桥接插件,通过原生浏览器工具控制可见的 Chrome 和 Edg

L4 · 沙盒安装通过 8,456 星

dsh-pocket

dsh-pocket

DSH Pocket 让 DeepSeek Harness 装进口袋:电脑跑 dsh web,手机扫码即实时同步访问(局域网+公网),人在外

L5 · 运行验证通过 1,656 星

Browser4

Browser4

L4 · 沙盒安装通过 1,152 星

agentrq

agentrq

L4 · 沙盒安装通过 1,140 星

插件的元信息来自作者仓库;分类、验证等级与安全结论的中文说明为中文整理,最近核验 —。