Is io.github.theYahia/chestnyznak-mcp safe to use?

io.github.theYahia/chestnyznak-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.theYahia/chestnyznak-mcp?

io.github.theYahia/chestnyznak-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.theYahia/chestnyznak-mcp do?

io.github.theYahia/chestnyznak-mcp provides 5 tools: check_marking_code, get_product_info, check_batch, search_products, get_cis_info. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.theYahia/chestnyznak-mcp?

io.github.theYahia/chestnyznak-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.theYahia/chestnyznak-mcp actively maintained?

io.github.theYahia/chestnyznak-mcp is actively maintained — last commit was 24 days ago. It has 2 GitHub stars.

io.github.theYahia/chestnyznak-mcp

@theyahia/chestnyznak-mcp

MCP server for Chestniy ZNAK (Честный ЗНАК) API — product marking verification. No auth needed for

2 41/wk 5 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 24d ago

Works with most clients

Transport: stdio, http

5 tools · ~444 tok

Grade A · 0.2% of 200K ctx

Edit this pageView history

Data E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "chestnyznak": {
      "args": [
        "-y",
        "@theyahia/chestnyznak-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-theyahia-chestnyznak-mcp)](https://mcppedia.org/s/io-github-theyahia-chestnyznak-mcp)

Read me

What io.github.theYahia/chestnyznak-mcp does

MCP-сервер для Честный ЗНАК API — проверка маркировки товаров. 5 инструментов. Публичные проверки без авторизации, расширенный поиск с токеном.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@theyahia/chestnyznak-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

85/100across 5 weighted dimensions

How we score →

0255075100

−15

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @theyahia/chestnyznak-mcp against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~444 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.theYahia/chestnyznak-mcp safe to use?: io.github.theYahia/chestnyznak-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.theYahia/chestnyznak-mcp?: io.github.theYahia/chestnyznak-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.theYahia/chestnyznak-mcp do?: io.github.theYahia/chestnyznak-mcp provides 5 tools: check_marking_code, get_product_info, check_batch, search_products, get_cis_info. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.theYahia/chestnyznak-mcp?: io.github.theYahia/chestnyznak-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.theYahia/chestnyznak-mcp actively maintained?: io.github.theYahia/chestnyznak-mcp is actively maintained — last commit was 24 days ago. It has 2 GitHub stars.

Similar servers

Others in data / ecommerce

View all →

Supabase MCP Server94

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

PostgreSQL MCP Server94

Query and manage PostgreSQL databases directly from AI assistants

87.9k 1

Dbhub94

Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.

3.1k 2

Mysql_mcp_server93

A Model Context Protocol (MCP) server that enables secure interaction with MySQL databases

1.3k 2

MCP Security Weekly

Get CVE alerts and security updates for io.github.theYahia/chestnyznak-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Data E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "chestnyznak": {
      "args": [
        "-y",
        "@theyahia/chestnyznak-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-theyahia-chestnyznak-mcp)](https://mcppedia.org/s/io-github-theyahia-chestnyznak-mcp)

Read me

What io.github.theYahia/chestnyznak-mcp does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@theyahia/chestnyznak-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

@theyahia/chestnyznak-mcp

MCP-сервер для API «Честный ЗНАК» / ЦРПТ — проверка маркировки товаров. 5 инструментов. Публичные проверки без авторизации, информация из True API с токеном.

Часть серии Russian API MCP (50 серверов) by @theYahia.

Установка

Claude Desktop

{
  "mcpServers": {
    "chestnyznak": {
      "command": "npx",
      "args": ["-y", "@theyahia/chestnyznak-mcp"]
    }
  }
}

Claude Desktop (с авторизацией)

{
  "mcpServers": {
    "chestnyznak": {
      "command": "npx",
      "args": ["-y", "@theyahia/chestnyznak-mcp"],
      "env": {
        "CHESTNYZNAK_TOKEN": "ваш-токен"
      }
    }
  }
}

Claude Code

claude mcp add chestnyznak -- npx -y @theyahia/chestnyznak-mcp

# С авторизацией
CHESTNYZNAK_TOKEN=ваш-токен claude mcp add chestnyznak -- npx -y @theyahia/chestnyznak-mcp

Streamable HTTP

npx @theyahia/chestnyznak-mcp --http --port=3000
# Endpoint: POST http://127.0.0.1:3000/mcp
# Health:   GET  http://127.0.0.1:3000/health

По умолчанию HTTP-сервер слушает только 127.0.0.1 и проверяет заголовок Host (защита от DNS-rebinding). Чтобы открыть наружу — --host=0.0.0.0 (на свой риск, аутентификации на /mcp нет).

Переменные окружения

Переменная	Обязательна	Описание
`CHESTNYZNAK_TOKEN`	Нет	Токен True API для инструментов `search_products`, `get_cis_info`. См. «Авторизация».
`CHESTNYZNAK_BASE_URL`	Нет	Origin авторизованного API (по умолчанию `https://markirovka.crpt.ru`). Допускаются только `https` хосты `.crpt.ru` / `.crptech.ru`.
`CHESTNYZNAK_PUBLIC_BASE_URL`	Нет	Базовый URL публичного API (по умолчанию `https://mobile.api.crpt.ru/mobile`). Удобно для моков в тестах.

Инструменты (5)

Публичные (без авторизации)

Инструмент	Аргументы	Описание
`check_marking_code`	`code`, `codeType?`	Проверка подлинности по коду маркировки
`get_product_info`	`code`, `codeType?`	Подробная информация: название, группа, производитель, владелец
`check_batch`	`codes[]`, `codeType?`	Пакетная проверка до 50 кодов (параллелизм ограничен)

codeType — datamatrix (по умолчанию), qr или ean13.

Авторизованные (CHESTNYZNAK_TOKEN)

Инструмент	Аргументы	Описание
`search_products`	`query` (GTIN)	Информация о товаре по GTIN из True API
`get_cis_info`	`cis`	Информация о CIS (коде идентификации) из True API

Поиск по названию/бренду — это Национальный каталог (nk.crpt.ru), отдельный API; здесь не поддерживается. search_products работает по GTIN.

Формат ответа

check_marking_code:

{ "code": "0104600702028445", "found": true, "valid": true, "status": "INTRODUCED" }

get_product_info (поля producer/owner/status берутся из вложенного объекта группы товара, при отсутствии — null):

{
  "code": "0104600702028445",
  "found": true,
  "valid": true,
  "status": "INTRODUCED",
  "productName": "Молоко 3.2%",
  "category": "milk",
  "producerName": "АО \"Данон Россия\"",
  "ownerName": "ООО Магнит",
  "ownerInn": "2309085638"
}

status — строковый enum: EMITTED / APPLIED / INTRODUCED / RETIRED / WRITTEN_OFF / DISAGGREGATION и др.

Каждый инструмент дополнительно возвращает structuredContent (типизированный объект по outputSchema), помимо текстового JSON.

Примеры

Проверь код маркировки 0104600702028445
Расскажи подробнее о товаре с кодом 010460070202844521
Проверь пачку кодов: 0104600702028445, 0104600702028446
Информация о товаре с GTIN 04600702028445
Информация о CIS 0104600702028445

... [View full README on GitHub](https://github.com/theYahia/chestnyznak-mcp#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

85/100across 5 weighted dimensions

How we score →

0255075100

−15

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @theyahia/chestnyznak-mcp against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~444 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.theYahia/chestnyznak-mcp safe to use?: io.github.theYahia/chestnyznak-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.theYahia/chestnyznak-mcp?: io.github.theYahia/chestnyznak-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.theYahia/chestnyznak-mcp do?: io.github.theYahia/chestnyznak-mcp provides 5 tools: check_marking_code, get_product_info, check_batch, search_products, get_cis_info. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.theYahia/chestnyznak-mcp?: io.github.theYahia/chestnyznak-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.theYahia/chestnyznak-mcp actively maintained?: io.github.theYahia/chestnyznak-mcp is actively maintained — last commit was 24 days ago. It has 2 GitHub stars.