Shopee Seller

Shopee Seller

This connector calls the Shopee Open Platform API v2 for one Shopee shop: shop details, listings and their variations, orders, shipping and tracking, returns, order income, discount promotions and Shopee Ads figures. Stock and price updates are included but installed switched off.

What you need: a Shopee Open Platform developer account and an app of your own, with its Partner ID and Partner Key, and the seller account of the shop. About 15 minutes the first time, longer if Shopee still has to approve the app.

Setup

1. Sign in at https://open.shopee.com, complete the developer registration, then in the Console open App List and create an app for your own shop (for example the Seller In House System type). Shopee reviews new apps before they can go live.
2. On the app's edit page, declare the Test Redirect URL Domain and the Live Redirect URL Domain: the address of your AnythingMCP backend, https://cloud.anythingmcp.com on AnythingMCP Cloud, or your own SERVER_URL when self-hosted. Shopee refuses an authorization whose redirect is on another domain. AnythingMCP sends Shopee back to <that address>/api/shopee/callback/....
3. Copy the app's Partner ID into SHOPEE_PARTNER_ID and its Partner Key into SHOPEE_PARTNER_KEY. Live and test keys are different: use the pair that matches SHOPEE_HOST.
4. Set SHOPEE_HOST: https://partner.shopeemobile.com for live shops (Southeast Asia, Taiwan, Latin America and the other markets), https://openplatform.shopee.com.br if your app is served from Brazil, https://openplatform.shopee.cn for apps of developers in China mainland, and https://openplatform.sandbox.test-stable.shopee.sg (or https://partner.test-stable.shopeemobile.com) with the test keys and a sandbox test shop.
5. Install the connector, open it in AnythingMCP and click Authorize with Provider. Shopee asks you to sign in: use the shop account (a main or merchant account is not supported), pick the shop and how long the authorization lasts (up to 365 days), and confirm. You come back to AnythingMCP and the connector is ready.

How it signs: every call carries partner_id, timestamp, access_token, shop_id and sign in the query, where sign is an HMAC-SHA256 over the partner id, the API path, the timestamp, the access token and the shop id, keyed with the partner key. The partner key itself never leaves AnythingMCP. A signature is only valid for 5 minutes, so a host clock that is off gives error_sign or a timestamp error.

Tokens: the access token lasts about 4 hours and is renewed automatically before it expires; the refresh token rotates on every renewal and is stored encrypted on the connector. If the connector is not used for 30 days, or the shop's authorization ends or is cancelled in Shopee Seller Centre, Shopee refuses the refresh token: the connector then shows that it needs a new authorization, its owner gets one email, and calls stop until someone clicks Authorize with Provider again. shopee_get_shop_info shows when the current authorization expires (expire_time).

Where to start: shopee_get_shop_info checks everything at once. Listings: shopee_list_items or shopee_search_items give item ids, shopee_get_items the details, shopee_get_item_models the variations with their own price and stock, shopee_get_items_extra_info sales and views. Orders: shopee_list_orders (a window of at most 15 days, Unix seconds), then shopee_get_order_details for up to 50 order numbers; shopee_list_orders_to_ship lists what still has to go out. Shipping: shopee_get_shipping_parameter, shopee_get_tracking_number, shopee_get_tracking_info, shopee_list_logistics_channels. After-sales: shopee_list_returns and shopee_get_return. Money in: shopee_get_order_income. Marketing: shopee_list_discounts, shopee_get_ads_balance, shopee_get_ads_daily_performance.

Times and paging: times are Unix seconds and windows are limited (15 days for orders and returns). Lists page with offset/next_offset, cursor/next_cursor or page_no, each tool says which; keep going while has_next_page or more is true.

Errors: Shopee answers with an error code and a message. error_sign or invalid_partner_id: the partner id, key or host do not belong together (live keys on the sandbox host, or the reverse). error_permission: the app lacks the permission for that API (Ads, for example). error_param: a parameter is wrong or a time window is too long. error_rate_limit or HTTP 429: wait and try again. If your app declares an IP allowlist in the Console, calls from AnythingMCP's address fail with source_ip_undeclared.

Writes: shopee_update_stock and shopee_update_price change the live shop and are installed switched off; turn them on per connector if you want the AI to make such changes, and confirm every change with the user first. Nothing here moves money, ships, cancels or answers buyers.