Limonene MCP server

Limonene AI connector

Amazon seller investigations through ChatGPT, Claude and compatible MCP clients. Basic connections expose six read-only tools. Separately consented management access supports additional analysis and approved actions; the initial read-only Claude directory listing is public and expanded management metadata is in review.

Endpoint: https://limonene.app/api/mcp Setup and permissions: https://limonene.app/connect-ai Revoke connections: https://limonene.app/api/mcp/connections Privacy: https://limonene.app/privacy

Claude listing: https://claude.ai/directory/limonene. Its approved description currently covers six read-only tools; the expanded listing update is in review. The separate Claude Code/Cowork plugin and OpenAI submissions remain in review.

Connection

1. Sign in to Limonene and connect an Amazon store. Complete its initial sync.
2. Add the endpoint as a custom remote connector in your AI client (account/workspace support varies).
3. Authenticate in the browser. Read the client name and callback origin, select a store and choose Read only or Read and manage. Management requires a separate acknowledgment and approval before each change.
4. Ask: “Review my last seven days. What deserves investigation? Cite sources, dates, and limitations.”

Claude Code: claude mcp add --transport http limonene https://limonene.app/api/mcp, then use /mcp to authenticate. The package includes separate OpenAI and Claude manifests referring to the same remote server; there is no local executable and no credential embedded in the package.

Basic tools

• getstoreoverview: bounded marketplace-local sales window.
• getopeninsights: dated existing alerts, capped at 25.
• getpricingand_buybox: cached observations for up to 20 SKUs; no price edits.
• getinventoryhealth: FBA-only inventory, optional SKU.
• getsalestrend: SKU history for 1–60 days.
• getprofitbreakdown: revenue/fees and available cost-coverage information; do not label fees-only figures net profit.

The six-tool basic connection excludes changes and buyer contacts. Choosing Read and manage in a compatible client enables up to 57 tools, depending on store feature availability, including approved prices, listings, repricing rules and schedules. Advertising changes and paid reimbursement filing are excluded. DeepSeek’s current package is a read-only pilot. Each grant is bound to one store and its active marketplace; reads fail closed while a different marketplace is active. To read that marketplace, reconnect. Results use the existing capability caches and may trigger their normal background refresh. The external AI generates the answer; this connector does not run a second Limonene model call or debit chat credits. First-party telemetry records connection, revocation, tool name, success and duration; it does not log prompts, arguments, tokens or tool results. Existing billing remains advisory under the current app policy. This release does not introduce a paid gate or promise unlimited access. Limits: 60 MCP requests/minute/store plus the existing IP ceiling.

Privacy and security

OAuth authorization code flow with mandatory S256 PKCE and resource binding. Public clients register with tokenendpointauth_method: none. Access tokens expire after one hour; refresh tokens rotate and expire after 30 days. Tokens/codes/browser nonces are stored hashed. Consent requests expire after ten minutes and codes after one minute. Ownership, connection health, revocation and marketplace are rechecked on access. Product and alert text are untrusted data.

The AI service receives the requested store results under the seller's authorization. Its own data policies apply. Revocation blocks subsequent reads, not copies already retained by that service. Account deletion removes grants and their token/code records.

GitHub Copilot in VS Code

Shortened. The full README is on GitHub.