allegro-mcp

MCP server for Allegro seller catalogue work: connect an account, find offers, plan a price or stock change, apply it only after explicit confirmation.

Node 20+. stdio by default, Streamable HTTP with --http. Works with Cursor, Claude Desktop, VS Code, and any general purpose agent.

Created by NOXLABS AI. Not affiliated with Allegro.pl.

npm · GitHub

Install

npx -y allegro-mcp --help

Or install the command: npm install -g allegro-mcp.

1. Register an Allegro app

apps.developer.allegro.pl — sandbox: apps.developer.allegro.pl.allegrosandbox.pl.

• Type headless / device_code. No redirect URI.

2. Connect the agent

Add the server to your client's MCP config — Cursor ~/.cursor/mcp.json, Claude Desktop claude_desktop_config.json, VS Code .vscode/mcp.json:

{
  "mcpServers": {
    "allegro": {
      "command": "npx",
      "args": ["-y", "allegro-mcp"],
      "env": {
        "ALLEGRO_CLIENT_ID": "your-client-id",
        "ALLEGRO_CLIENT_SECRET": "your-client-secret",
        "ALLEGRO_USER_AGENT": "YourApp/1.0.0 (+https://example.com/YourApp)",
        "ALLEGRO_TOKEN_STORE": "/absolute/path/to/token.json"
      }
    }
  }
}

Set ALLEGRO_TOKEN_STORE to a fixed path. npx does not guarantee a stable working directory.

3. Authorize the seller account

Ask the agent: "which Allegro account am I connected to?" It calls connect_account, and you get one of two things back:

• CONNECTED with the account login — already authorized, you are done.
• AUTHORIZATION_REQUIRED with a link and an 8-character code. Open the link, approve as the seller (within the hour), then ask the agent to confirm. It calls confirm_connection, which reports PENDING until you approve and then CONNECTED.

Then try "find my active offers and take 10% off the USB-C cables" — the agent plans the change, shows before/after per offer, and writes nothing until you confirm.

Allegro rotates the refresh token on every refresh and kills the old chain, so the token file outranks ALLEGRO_REFRESH_TOKEN, deleting it costs you another approval round, and only one process per account may run.

Configuration

| Variable | Default | Description | |---|---|---| | ALLEGRO_CLIENT_ID | required | App client id | | ALLEGRO_CLIENT_SECRET | required | App client secret | | ALLEGRO_USER_AGENT | required | Registered UA, sent on every request | | ALLEGRO_API_BASE | https://api.allegro.pl | REST host | | ALLEGRO_AUTH_BASE | https://allegro.pl/auth/oauth | Token URL is ${ALLEGRO_AUTH_BASE}/token | | ALLEGRO_SITE | https://allegro.pl | Offer link base | | ALLEGRO_TOKEN_STORE | token.json | Rotated refresh token | | ALLEGRO_REFRESH_TOKEN | none | Seeds the first run only | | ALLEGRO_AUDIT_PATH | audit.jsonl | Append-only apply log | | HOST / PORT | 127.0.0.1 / 3000 | --http bind |

--http has no authentication — anyone who can reach the port gets the seller tools. Keep it on localhost.

Source, architecture, and tests: github.com/noxlabs-ai/allegro-merchant-mcp.