MCP server ยท auth gateway

Your Amazon Ads data, in any AI tool you use

MixShift MCP gives Claude, Cursor, ChatGPT, and any MCP-compatible client secure, token-based access to your Amazon Ads, Retail, and custom data โ€” with per-tenant isolation and TLS 1.3 end-to-end.

๐Ÿ”’ TLS 1.3 end-to-end ๐Ÿ”‘ PKCE / OAuth flow ๐Ÿข Per-tenant isolation

What you can do with it

Connect once, then query your data from whatever AI workflow you already use.

โšก

Live data queries

Run SQL against your Amazon Ads, Retail, and Seller Central data in real time โ€” no static dumps, no stale snapshots.

๐Ÿค–

AI tool integration

Works with Claude Code, Claude.ai connectors, Cursor, and any MCP-compatible client out of the box.

๐Ÿ—‚๏ธ

Multi-account support

Token-scoped to your tenant. Authenticate once, query across every account you manage.

๐ŸŽฏ

Scoped permissions

Read-only by default. Per-user MySQL grants enforce tenant boundaries at the data layer.

๐Ÿ”

Action execution

Bid changes, negation pushes, campaign updates โ€” gated by approval flags so an LLM can't move money without human sign-off.

๐Ÿ›ก๏ธ

Hardened by default

Rate-limited login, refresh-token rotation with replay detection, super-admin gateway blocks, every call audited.

What calling it looks like

Standard REST + Bearer auth. If you can curl, you can integrate.

curl ยท /api/query
# Get a token via the PKCE or device-code flow (see plugin docs)
# then query your data:
curl -X POST https://mcp.mixshift.io/api/query \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"sql": "SELECT campaign_name, spend, sales
            FROM campaignmetric
            WHERE date > NOW() - INTERVAL 30 DAY
            ORDER BY spend DESC LIMIT 100"}'

Built for operators, audited for security

This service is open source โ€” every connection, every grant check, every token rotation is verifiable. We publish our security disclosure policy and welcome responsible reports.

View source Security disclosure