megamarket-connector

Megamarket Connector

Reads Megamarket via its internal mobile JSON API, POSTed from inside the operator's Chrome over CDP. ServicePipe gates the whole site by IP reputation: the API returns valid JSON, but the JSON is always the code-7 "отключите VPN" refusal with your own IP echoed back. Passing the ServicePipe challenge is not enough on its own: an anonymous browser that has cleared it still reads an empty items list. Real catalog data needs a browser that is actually logged in.

When to use

• Search the Megamarket catalog by text
• One product's price, old price, availability, rating

Tools available

• megamarket_search(query) — items + total count. price_rub None when absent.
• megamarket_card(item_id_or_url) — one product card

Not an MCP tool: megamarket_selfcheck() is a tri-state canary, where a code-7 refusal is inconclusive (transport), never drift. It is CLI-only — marketplace-mcp doctor runs every connector's canary at once.

Gotchas

• A code-7 / VPN-error body is an IP block, not data — the connector maps it to transport_down with the fix inline.
• Run megamarket_selfcheck from your Chrome first: these endpoints were probed anonymously, and only a challenge-passed session confirms the in-browser shape.
• A missing price is null, never 0: price_rub: null means Megamarket had no usable price — treat it as no data, never as a free item.
• Prices are address-dependent. _meta.warnings carries the address source only when it changes what the prices mean: address_source:profile (the operator's personal default address — personalized prices) or address_source:none (no delivery address resolved, so no offers are deliverable — expect the empty-items symptom). Both mark the response _meta.healthy=false. The default public city-level source (address_source:suggest from MEGAMARKET_ADDRESS) is the normal healthy case: no address warning.

Privacy: the profile address is opt-in

MEGAMARKET_USE_PROFILE_ADDRESS (default 0) decides whether the connector may read the private, account-gated /profileService/address/list endpoint from the operator's logged-in Chrome profile, to use the profile's default delivery address. Off — the default — it is never called: the address comes from the public suggest endpoint for MEGAMARKET_ADDRESS (Москва by default), and prices are city-level, not personalized. On, the profile's address list, its default flag and the region are read once per process, prices and availability match exactly what the operator sees on the site, and the search response carries address_source:profile plus a profile_address_read warning in _meta.warnings so the reader knows before quoting a price. The raw addressId never leaves the process.