CSPriceAPI – CS2 skin prices

by cspriceapi.com · remote · no sign-in to list tools · v0.1.1 · published by com.cspriceapi

Live CS2 skin prices: BUFF163, YouPin, Skinport, CSFloat, Steam and 8 more markets, Doppler phases

Read only

Compare Registry entry

6 tools: 6 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things0Claude Code: ask
Only reads6Claude Code: allow: see these tools

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http cspriceapi https://api.cspriceapi.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Only reads 6Looks things up and changes nothing.Claude Code: allow

find_itemsFinds exact CS2 market_hash_name values (skins, knives, gloves, stickers, cases, agents) from a loose query, e.g.Reads text others writeNo findings
Why it is in this group
- The name "find_items" says "find": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Finds exact CS2 market_hash_name values (skins, knives, gloves, stickers, cases, agents) from a loose query, e.g. 'ak redline ft', 'karambit doppler fn', 'st m4a1 printstream'. Use it before the price tools, which need exact names. Abbreviations: st = StatTrak, fn/mw/ft/ww/bs = exterior.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
- idempotentHint: true
get_float_ranged_pricesYouPin898 lowest listing price per float range (e.g.Reads text others writeNo findings
Why it is in this group
- The name "get_float_ranged_prices" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
YouPin898 lowest listing price per float range (e.g. 0.00-0.01, 0.01-0.02) for an item, in CNY, with Doppler phase and Fade % where relevant. Use it for low-float or high-fade valuations. Requires an API key (Pro plan).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
- idempotentHint: true
get_price_historyDaily or hourly price history of one item on one marketplace (lowest listing price and listing count), in the market's currency.Reads text others writeNo findings
Why it is in this group
- The name "get_price_history" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Daily or hourly price history of one item on one marketplace (lowest listing price and listing count), in the market's currency. Daily covers up to a year and more, hourly up to 30 days. Requires an API key (Enterprise plan).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
- idempotentHint: true
get_pricesLive lowest listing prices for CS2 items on up to 12 marketplaces (YouPin898, BUFF163, C5Game, EcoSteam, SkinBaron, Skinport, CSFloat, LIS-SKINS, DMarket, ShadowPay, Waxpeer, Marke…Reads text others writeNo findings
Why it is in this group
- The name "get_prices" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Live lowest listing prices for CS2 items on up to 12 marketplaces (YouPin898, BUFF163, C5Game, EcoSteam, SkinBaron, Skinport, CSFloat, LIS-SKINS, DMarket, ShadowPay, Waxpeer, Market.CSGO) plus the Steam Community Market best ask/bid. Refreshed about every 5 minutes. Prices are in each market's own currency (CNY, EUR or USD) with an approximate USD value for comparison, plus listing counts and the cheapest market. Doppler / Gamma Doppler names without a phase return every phase separately. Without an API key (preview): one item per call, 5 calls per day, prices from a snapshot up to 6 hours old.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
- idempotentHint: true
get_recent_salesRecent completed sales of an item on CSFloat, YouPin or Skinport with price, float, pattern (paint seed), stickers and keychains.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_recent_sales" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "keychain": it reads secrets.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Recent completed sales of an item on CSFloat, YouPin or Skinport with price, float, pattern (paint seed), stickers and keychains. Filter by float range or pattern. Requires an API key (Enterprise plan).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
- idempotentHint: true
get_youpin_buy_ordersCurrent YouPin898 buy orders (bids) for an item, in CNY, refreshed about every 30 minutes.Reads text others writeNo findings
Why it is in this group
- The name "get_youpin_buy_orders" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Current YouPin898 buy orders (bids) for an item, in CNY, refreshed about every 30 minutes. Default: best buy-order price and order count (Pro plan). With detail=true or any float/phase/fade/tier filter: every individual buy order with its float range and conditions (Enterprise plan). Requires an API key.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
- idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_recent_sales
Reads text others write6: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; find_items
get_float_ranged_prices
get_price_history
get_prices
get_recent_sales
get_youpin_buy_orders
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:30 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 0
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: none
Authorization servers: none
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

Install

Pinned to version 0.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http cspriceapi https://api.cspriceapi.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__cspriceapi__find_items",
      "mcp__cspriceapi__get_prices",
      "mcp__cspriceapi__get_youpin_buy_orders",
      "mcp__cspriceapi__get_float_ranged_prices",
      "mcp__cspriceapi__get_price_history",
      "mcp__cspriceapi__get_recent_sales"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as cspriceapi. Review it before you use it.

Capability tags behind 6 rules

mcp__cspriceapi__find_items untrusted-input
mcp__cspriceapi__get_prices untrusted-input
mcp__cspriceapi__get_youpin_buy_orders untrusted-input
mcp__cspriceapi__get_float_ranged_prices untrusted-input
mcp__cspriceapi__get_price_history untrusted-input
mcp__cspriceapi__get_recent_sales private-data, untrusted-input

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.cspriceapi/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

Run the operations that matter as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 17:53 UTC.

For agents: Markdown · JSON · report this listing