SHEIN Seller MCP Server: Orders, Stock and Tracking

💡 No install? Use cloud.anythingmcp.com directly. Sign in, click Connectors → SHEIN Seller, paste the App ID and App Secret, click Authorize with Provider and approve with the shop's main account on SHEIN, mint an MCP API key and you're done. No Docker, no git clone, no local server.

SHEIN Seller

Let your AI work with your SHEIN seller shop: orders, buyer address and tracking upload, parcel tracking, products with prices and stock, stock and price updates, categories and attributes, after-sales cases and returns.

Setup

What you need: a SHEIN Open Platform developer account of the type Seller Self-Developed (verified with the shop's merchant information), an approved app of the shop's cooperation mode, and the shop's main account to approve it. About 20 minutes of work, plus SHEIN's reviews of the account and the app.

1. Register at https://open.sheincorp.com, choose the developer type Seller Self-Developed and submit the merchant information it asks for (all of it is in the seller backend). The type cannot be changed once approved.
2. In the console open Application Management and create an application. Pick the application type of the shop's cooperation mode: Self-Operated or Semi-Managed for a marketplace shop (a shop in several modes needs one app per mode). Name, icon and description are shown to sellers and cannot be edited after submitting. SHEIN reviews the app; until it is approved there is no valid App ID or App Secret.
3. On the app's details page check the API Permission Package: the order, product, inventory, after-sales and return APIs must be subscribed (usually granted with the approval; otherwise click Apply for Permission Package). Add this server's outbound IP address to the app's IP whitelist: SHEIN refuses production calls from any other address (openapi00002). On AnythingMCP Cloud the setup page shows the address.
4. Copy the App ID into SHEIN_APP_ID and the App Secret into SHEIN_APP_SECRET, and pick the API address for SHEIN_API_HOST: https://openapi.sheincorp.com for self-operated and semi-managed apps, https://openapi.sheincorp.cn for fully managed, SHEIN-operated and other apps.
5. Install the connector and click Authorize with Provider (the last step of the setup guide does it). SHEIN's page opens: sign in to the seller backend with the shop's main account and click the authorize button. SHEIN sends the browser back to <SERVER_URL>/api/shein-auth/callback (on AnythingMCP Cloud: https://cloud.anythingmcp.com/api/shein-auth/callback) and the connector fetches the shop's key within the 10 minutes SHEIN allows.

The shop key: SHEIN hands over the shop's openKeyId and secretKey (the secretKey encrypted with the App Secret, which AnythingMCP decrypts once); both are stored encrypted on the connector. SHEIN documents no lifetime and no renewal for them. An authorization ends when the seller unbinds the app or resets the key, the shop is closed, SHEIN resets or unbinds it, or it expires: calls then fail with openapi00004 ("The user has expired"), the connector shows that it needs a new authorization, and someone clicks Authorize with Provider again.

How it signs: every call carries x-lt-openKeyId, x-lt-timestamp (Unix milliseconds) and x-lt-signature: five random characters followed by the Base64 of the lower-case hex HMAC-SHA256 of openKeyId&timestamp&path, keyed with the secretKey plus those five characters. The query is not signed. A timestamp is valid for 5 minutes, so the server clock must be right.

Where to start: shein_get_store_info checks the authorization and names the shop; shein_list_sites gives the site codes and currencies.

• Orders: shein_list_orders (a window of at most 48 hours is mandatory), then shein_get_orders for up to 30 at once. Only orders with stockMode 3 are shipped by the seller; printOrderStatus 1 means the order can be handled now.
• Shipping it yourself: shein_get_order_address (handle_type 2 also moves the order to be shipped), shein_list_warehouse_addresses, shein_list_shipping_channels, then shein_upload_tracking_numbers per piece (goodsId). shein_get_logistics_track follows the parcel. SHEIN marks the order shipped when the carrier scans it. shein_confirm_out_of_stock is switched off at install.
• Products: shein_search_products (codes, shelf status, prices, stock and campaign locks), shein_list_products (all codes), shein_get_product (one SPU in full). For new listings: shein_get_category_tree, shein_get_attribute_templates, shein_list_brands. shein_set_skc_shelf_status is switched off at install.
• Stock and prices: shein_list_warehouses, shein_get_stock, shein_update_stock (with an idempotency key per line), shein_update_prices (raises may wait for SHEIN's price review). shein_get_sku_sales gives units sold for managed shops.
• After sales: shein_list_after_sales_orders and shein_get_after_sales_orders, shein_list_return_orders and shein_get_return_orders only read; shein_sign_return_order is switched off at install.

Codes, times and amounts: SPU, SKC and SKU codes (spuName, skcName, skuCode) are SHEIN's; supplierCode and supplierSku are the seller's own. A SKU sold several times has one goodsId per piece, and tracking numbers, cancellations and return receipts work per goodsId. goodsId values are 64-bit numbers: the connector reads every id too long for a JavaScript number as text with its exact digits, and the tools take ids as text and send them to SHEIN as numbers, so copy them exactly as an order or return shows them. Order, after-sales and return windows are Beijing time (UTC+8) as yyyy-MM-dd HH:mm:ss; order details answer with yyyy-MM-dd'T'HH:mm:ss.SSSZ, tracking events with Unix milliseconds. Amounts are decimals in the currency named next to them (orderCurrency, currency, currencyCode).

Limits: every API has its own calls-per-second limit per app (20 for product search, 30 to 300 for the others), answered with openapi00006 or 832213 when exceeded. Order and return lists page by 30, product search by 10; an order window returns at most 10,000 orders, the product list at most 50,000 codes. The same SKC and site can change shelf status once per 20 minutes.

Answers and errors: SHEIN answers with code "0" and the result in info; any other code is an error with msg and a traceId to quote to SHEIN support within three days. The connector asks for English messages (language: en). openapi00001: the signature was refused; with a correct server clock this means the shop key changed (re-authorized or reset elsewhere), so authorize again. openapi00002: this server's IP address is not on the app's whitelist. openapi00003: the app has no permission for this API, the API is not for the shop's mode, or the developer account is disabled. openapi00004: the authorization has ended; authorize again. Write calls that take a list answer code 0 and name the refused lines (failedList, failure_results or info).

Prerequisites: SHEIN_API_HOST, SHEIN_APP_ID, SHEIN_APP_SECRET

Install the connector locally

curl -fsSL https://raw.githubusercontent.com/HelpCode-ai/anythingmcp/main/docker-compose.quickstart.yml -o docker-compose.yml
printf 'JWT_SECRET=%s\nENCRYPTION_KEY=%s\n' "$(openssl rand -hex 32)" "$(openssl rand -hex 32)" > .env
docker compose up -d

Open http://localhost:3000/connectors/store, pick SHEIN Seller and paste in the env vars listed under Prerequisites.

Available tools

Example prompts

• "Which SHEIN orders from the last 24 hours can I handle now?"
• "Upload the UPS tracking number 1Z999AA10123456784 for both pieces of order GSH12345678901."
• "Which of my SKUs have fewer than 10 units in stock?"
• "Set the stock of SKU code I8xk2m4p0q in my main warehouse to 60."
• "Which return orders and after-sales cases came in this week, and what do the buyers say?"

Next steps

• Connect to Claude
• Connect to ChatGPT