Home / MCP registry index / com.vendooly/vendooly
Vendooly
com.vendooly/vendooly in the official MCP registry.
Endpoint https://mcp.vendooly.com/mcp.
The registry describes it as: Amazon Seller Central, Ads and Vendor Central in ChatGPT & Claude. 106 tools; writes need approval.
We read its 129 tools on 2026-10-27. Nothing in them matched our tool-poisoning rules.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
list_clients get_client_status get_fba_inventory fba_inbound_discrepancies fba_reimbursement_check get_fulfilled_shipments get_inbound_plans create_inbound_plan get_inbound_plan generate_inbound_options confirm_inbound_option set_packing_information cancel_inbound_plan update_mfn_quantity check_feed_status get_orders get_order_items get_fba_customer_returns fiscal_transactions_export get_epr_report audit_catalog_quality create_listing update_listing get_listing delete_listing bulk_delete_listings search_catalog get_product_types list_my_products get_my_catalog_detail get_catalog_item get_competitive_pricing get_buybox_prices get_my_pricing get_fee_estimate update_price bulk_update_prices bulk_update_inventory bulk_update_listings bulk_set_shipping_template get_account_health check_listing_restrictions get_listing_issues list_inactive_listings audit_title_compliance plan_title_seo_fix apply_title_seo_batch title_seo_status title_seo_rollback audit_compliance update_item_highlights audit_aplus_coverage list_aplus_documents get_aplus_document get_dashboard_data get_all_dashboards generate_vendor_oauth_link get_vendor_purchase_orders get_vendor_purchase_order_details get_vendor_po_summary and 69 more
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/com-vendooly-vendooly)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.