Is io.github.theYahia/pochta-russia-mcp safe to use?

io.github.theYahia/pochta-russia-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.theYahia/pochta-russia-mcp?

io.github.theYahia/pochta-russia-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.theYahia/pochta-russia-mcp do?

io.github.theYahia/pochta-russia-mcp provides 1 tool: Authorization. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.theYahia/pochta-russia-mcp?

io.github.theYahia/pochta-russia-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.theYahia/pochta-russia-mcp actively maintained?

io.github.theYahia/pochta-russia-mcp is actively maintained — last commit was 26 days ago. It has 1 GitHub stars.

io.github.theYahia/pochta-russia-mcp

@theyahia/pochta-russia-mcp

MCP server for Russian Post (Почта России) API — tracking, tariff calculation, post office search.

1 35/wk 1 tool GitHub npm

No known CVEs

No license

Actively maintained

Last commit 26d ago

Works with most clients

Transport: stdio, http

1 tool · ~35 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 18h ago

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "pochta": {
      "env": {
        "POCHTA_KEY": "<YOUR_API_KEY>",
        "POCHTA_TOKEN": "<YOUR_ACCESS_TOKEN>"
      },
      "args": [
        "-y",
        "@theyahia/pochta-russia-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-theyahia-pochta-russia-mcp)](https://mcppedia.org/s/io-github-theyahia-pochta-russia-mcp)

Read me

What io.github.theYahia/pochta-russia-mcp does

MCP-сервер для API Почты России — отслеживание, расчёт тарифов, сроки доставки, поиск отделений, индексы, нормализация адресов.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@theyahia/pochta-russia-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

85/100across 5 weighted dimensions

How we score →

0255075100

−15

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @theyahia/pochta-russia-mcp against OSV.dev.

Inventory

Tools (1)

Click any tool to inspect its schema.

~35 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.theYahia/pochta-russia-mcp safe to use?: io.github.theYahia/pochta-russia-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.theYahia/pochta-russia-mcp?: io.github.theYahia/pochta-russia-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.theYahia/pochta-russia-mcp do?: io.github.theYahia/pochta-russia-mcp provides 1 tool: Authorization. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.theYahia/pochta-russia-mcp?: io.github.theYahia/pochta-russia-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.theYahia/pochta-russia-mcp actively maintained?: io.github.theYahia/pochta-russia-mcp is actively maintained — last commit was 26 days ago. It has 1 GitHub stars.

Similar servers

Others in other

View all →

Pi Lean Ctx93

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.3k 6

Headroom93

Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.

59.9k 3

Sigmap92

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

598 6

Sunpeak92

App framework, testing framework, and inspector for MCP Apps.

207 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.theYahia/pochta-russia-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "pochta": {
      "env": {
        "POCHTA_KEY": "<YOUR_API_KEY>",
        "POCHTA_TOKEN": "<YOUR_ACCESS_TOKEN>"
      },
      "args": [
        "-y",
        "@theyahia/pochta-russia-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-theyahia-pochta-russia-mcp)](https://mcppedia.org/s/io-github-theyahia-pochta-russia-mcp)

Read me

What io.github.theYahia/pochta-russia-mcp does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@theyahia/pochta-russia-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

pochta-russia-mcp

Возможности (6 инструментов)

Инструмент	Описание	Что требуется
`track`	Отслеживание отправления по трек-номеру	`POCHTA_LOGIN` + `POCHTA_PASSWORD` (SOAP-трекинг)
`calculate`	Расчёт стоимости и сроков доставки	`POCHTA_TOKEN` + `POCHTA_LOGIN` + `POCHTA_PASSWORD`
`delivery_time`	Расчёт сроков доставки между индексами	`POCHTA_TOKEN` + `POCHTA_LOGIN` + `POCHTA_PASSWORD`
`get_offices`	Поиск почтовых отделений	`POCHTA_TOKEN` + `POCHTA_LOGIN` + `POCHTA_PASSWORD`
`zip_lookup`	Информация по почтовому индексу	`POCHTA_TOKEN` + `POCHTA_LOGIN` + `POCHTA_PASSWORD`
`normalize_address`	Нормализация адреса через API	`POCHTA_TOKEN` + `POCHTA_LOGIN` + `POCHTA_PASSWORD`

Быстрый старт

Claude Desktop / Cursor / Windsurf (stdio)

{
  "mcpServers": {
    "pochta": {
      "command": "npx",
      "args": ["-y", "@theyahia/pochta-russia-mcp"],
      "env": {
        "POCHTA_TOKEN": "<ACCESS_TOKEN>",
        "POCHTA_LOGIN": "<LOGIN>",
        "POCHTA_PASSWORD": "<PASSWORD>"
      }
    }
  }
}

Claude Code

claude mcp add pochta \
  -e POCHTA_TOKEN=<ACCESS_TOKEN> \
  -e POCHTA_LOGIN=<LOGIN> \
  -e POCHTA_PASSWORD=<PASSWORD> \
  -- npx -y @theyahia/pochta-russia-mcp

Streamable HTTP

npx @theyahia/pochta-russia-mcp --http --port=3000

MCP endpoint: http://localhost:3000/mcp Health check: http://localhost:3000/health → {"status":"ok","version":"…","tools":6}

Переменные окружения

Переменная	Обязательная	Описание
`POCHTA_TOKEN`	Да	Access-токен приложения → заголовок `Authorization: AccessToken …`
`POCHTA_LOGIN`	Да	Логин кабинета → часть `X-User-Authorization: Basic …`
`POCHTA_PASSWORD`	Да	Пароль кабинета → часть `X-User-Authorization: Basic …`
`POCHTA_KEY`	Нет	Back-compat: готовый `base64(login:password)` для `X-User-Authorization` (вместо LOGIN/PASSWORD)
`POCHTA_TIMEOUT_MS`	Нет	Таймаут запроса в мс (по умолчанию 15000)

Получите доступ к API: Кабинет отправителя → Настройки → API. Спецификация: https://otpravka.pochta.ru/specification.

Авторизация

REST-методы otpravka-api используют два заголовка (согласно официальной спецификации):

Authorization: AccessToken <POCHTA_TOKEN> — access-токен приложения;
X-User-Authorization: Basic <base64(POCHTA_LOGIN:POCHTA_PASSWORD)> — учётные данные кабинета.

Отслеживание (track) использует SOAP-API трекинга (tracking.russianpost.ru) и требует POCHTA_LOGIN + POCHTA_PASSWORD (access-токен там не применяется).

⚠️ Миграция на 2.0.0 (breaking change)

В версиях ≤ 1.x заголовки авторизации формировались неверно (access-токен и ключ были перепутаны местами), из-за чего REST-методы не проходили авторизацию. В 2.0.0 контракт исправлен:

Было: POCHTA_TOKEN + POCHTA_KEY. Этот набор больше не работает сам по себе.
Стало: POCHTA_TOKEN + POCHTA_LOGIN + POCHTA_PASSWORD.
POCHTA_KEY сохранён только как опциональный back-compat (готовый base64(login:password) для X-User-Authorization).

Надёжность

Повторные попытки (до 3) с экспоненциальной задержкой на сетевые ошибки, 429 и 5xx.
Таймаут запроса (по умолчанию 15 с, настраивается через POCHTA_TIMEOUT_MS).
Диагностические логи ретраев/ошибок пишутся в stderr (канал stdout занят MCP).

Skills (Claude Code)

Команда	Описание
`/tra

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

85/100across 5 weighted dimensions

How we score →

0255075100

−15

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @theyahia/pochta-russia-mcp against OSV.dev.

Inventory

Tools (1)

Click any tool to inspect its schema.

~35 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.theYahia/pochta-russia-mcp safe to use?: io.github.theYahia/pochta-russia-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.theYahia/pochta-russia-mcp?: io.github.theYahia/pochta-russia-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.theYahia/pochta-russia-mcp do?: io.github.theYahia/pochta-russia-mcp provides 1 tool: Authorization. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.theYahia/pochta-russia-mcp?: io.github.theYahia/pochta-russia-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.theYahia/pochta-russia-mcp actively maintained?: io.github.theYahia/pochta-russia-mcp is actively maintained — last commit was 26 days ago. It has 1 GitHub stars.

Similar servers

Others in other

View all →

Pi Lean Ctx93

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.3k 6

Headroom93

Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.

59.9k 3

Sigmap92

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

598 6

Sunpeak92

App framework, testing framework, and inspector for MCP Apps.

207 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.theYahia/pochta-russia-mcp and similar servers.