π¦ Unofficial library, CLI tool, and MCP server for the Tori.fi marketplace.
Config is the same across clients β only the file and path differ.
{
"mcpServers": {
"torium": {
"command": "torium-mcp"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Python client for the Tori.fi marketplace. Usable as a library, a CLI tool, and an MCP server.
This server supports HTTP transport. Be the first to test it β help the community know if it works.
Five weighted categories β click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience β it helps other developers decide.
Sign in to write a review.
Others in developer-tools / ecommerce
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
Manage Supabase projects β databases, auth, storage, and edge functions
An open-source AI agent that brings the power of Gemini directly into your terminal.
MCP Security Weekly
Get CVE alerts and security updates for Torium and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Python client for the Tori.fi marketplace. Usable as a library, a CLI tool, and an MCP server.
1. Clone and install:
git clone https://github.com/ahnl/torium
uv tool install ./torium
This places torium-mcp (and torium) on your PATH globally. No venv path needed.
2. Authenticate (once):
torium auth setup
Opens a browser for OAuth login. On macOS the redirect is captured automatically.
On Windows/Linux, after login the browser will show an infinite loading spinner or a "can't open" error. Open the browser's developer tools (F12) β Console, find the failed redirect URL starting with fi.tori.www..., right-click it to copy the link address, and paste it into the terminal. Do this quickly. The code in the URL expires in 30-60 seconds.
Credentials will be saved to ~/.config/torium/credentials.json. Alternatively, set TORI_REFRESH_TOKEN in your environment. The MCP server will use it directly, no credentials file needed.
3. Add to Claude Desktop:
Go to Settings β Developer β Edit Config and add:
{
"mcpServers": {
"torium": {
"command": "torium-mcp"
}
}
}
Restart Claude Desktop. The torium tools are now available.
Updating:
cd torium && git pull && uv tool install --reinstall .
You can run torium-mcp as a remote HTTPS server that multiple users connect to via claude.ai connectors. Each user authenticates their own Tori.fi account through a one-time OAuth popup.
By default, the server uses an email whitelist. You must allow each user before they can log in.
1. Allow your email (must be done before first login):
torium-mcp allow you@example.com --note "your name"
torium-mcp list-allowed # see who has access
torium-mcp revoke foo@example.com # remove access
2. Start the server:
torium-mcp --transport streamable-http --host 127.0.0.1 --port 5001 --base-url https://tori.example.com
The --base-url must be the public HTTPS URL that claude.ai can reach (e.g. via a reverse proxy or SSH tunnel).
3. Add https://tori.example.com/mcp in claude.ai connectors.
Claude opens a login popup. Click Log in to Tori.fi, complete the Schibsted login, then copy the fi.tori.www... redirect URL from the browser console and paste it into the form. After that, Claude has a 180-day session, with no further logins needed until it expires.
Each user's Tori credentials are stored separately in SQLite (
~/.config/torium/mcp.db). The local~/.config/torium/credentials.jsonfile used by stdio mode is never touched by the remote server.
torium auth setup # first-time OAuth login (see MCP: Local install above), saves refresh token
torium auth status # show stored token info and expiry
You can also skip the browser flow entirely by setting TORI_REFRESH_TOKEN in your environment.
The refresh token rotates and is saved on each use (valid ~1 year; bearer token valid ~1 hour).
torium listings # active listings (default)
torium listings --facet ALL # ACTIVE | EXPIRED | DRAFT | DISPOSED | ALL
torium listings stats <id> # clicks, messages, favorites
torium listings dispose <id> # mark as sold (merkitse myydyksi)
torium listings delete <id> # permanently delete (asks for confirmation)
torium listings delete <id> --yes # skip confirmation
torium listings edit <id> --price 7 # change price
torium listings edit <id> --title "New title" --description "..."
torium listings edit <id> --dry-run # inspect current values without saving
torium categories -
... [View full README on GitHub](https://github.com/ahnl/torium#readme)