CartClaw

Your AI agent shops your Amazon account. You approve every purchase.

CartClaw is a local MCP server for Claude Code and other MCP clients. Your agent checks orders, finds returns and fills the cart. Buying takes one click from you.

Install in 2 steps GitHub

Free and open source. Runs on your machine. amazon.com (US) only for now.

CartClaw approval page asking Approve this Amazon order, showing a $16.07 total, the item, delivery address, card, delivery date, and two buttons: Place order and Don't buy.
The approval page, with sample data. This click is the only way an order gets placed.

How buying works

The agent can ask to buy. It can't buy. Here's what happens when it asks.

  1. The agent calls checkout_request

    It tells CartClaw what's in the cart and that it wants to check out.

  2. CartClaw opens Amazon's checkout review

    In its own browser window. This step places nothing.

  3. An approval page opens in your normal browser

    It shows the total, items, address, card, delivery date and a screenshot of Amazon's page.

  4. You click Place order or Don't buy

    Requests expire after 15 minutes. A newer request replaces an older one.

  5. CartClaw checks again, then orders

    It reloads checkout and confirms the total, items, address and card still match what you saw. If anything changed, nothing is ordered.

What your agent can do

Eight tools. None of them can buy.

ordersYour order history, with each item's return window.
returnable_itemsWhat you can still return, soonest deadline first.
productTitle, price and availability for any ASIN.
cartWhat's in your cart right now.
cart_addPut an item in the cart.
cart_removeTake an item out.
checkout_requestAsk to buy. Opens the approval page for you. Places nothing.
checkout_statusDid you approve, decline, or let it expire?
place_orderDoesn't exist. Only the button on the approval page places an order.

Your account stays on your computer

A separate browser window

CartClaw drives its own window with its own profile. You sign in to Amazon once. Your everyday browser isn't touched.

Nothing leaves your machine

Your password and session never leave your computer. There's no CartClaw server. Nothing is hosted.

Fixed actions, not guesses

A generic browser agent has a model decide every click. CartClaw's actions are fixed code, so they're fast and predictable.

A person gates the money

Buying needs a human click on a page showing exactly what you're paying for.

Why drive a browser at all? Amazon has no shopping API for buyers. The old Product Advertising API was shut down on 2026-05-15.

Install in two steps

# 1. Sign in to Amazon once. A window opens.
#    Tick "Keep me signed in".
uvx --from git+https://github.com/ucsandman/cartclaw cartclaw login

# 2. Add it to Claude Code
claude mcp add --scope user cartclaw -- uvx --from git+https://github.com/ucsandman/cartclaw cartclaw

Needs uv, git, and Brave, Chrome, Edge or Chromium. Other MCP clients can run the same uvx command as a local stdio server.

Free core. Pro is coming.

The core is MIT licensed and stays free.

Free

Open source, MIT

  • All eight tools
  • The approval page
  • Runs locally, nothing hosted
GitHub

Pro

Coming. Join the waitlist.

  • Returns autopilot: starts returns and picks the drop-off for you
  • Approve purchases from your phone

One email when Pro ships. Nothing else.

Questions

Is this allowed by Amazon?

You're the one using your own account. Automating it may break Amazon's Conditions of Use, and Amazon can act on accounts. CartClaw keeps you in control and runs only on your machine.

Can the agent buy without me?

No. There's no buy tool. Only the Place order button on the approval page places an order.

Does my password leave my computer?

No.

Which agents work?

Claude Code, and any MCP client that runs local stdio servers.

What if Amazon changes its pages?

The tools say what they couldn't read instead of guessing.