Mcmaster Navigator Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcmaster Navigator Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Unofficial headless MCP server for navigating McMaster-Carr and finding exact part numbers from text descriptions or page navigation.
This server is for the gap before your product-data pipeline: it finds McMaster part numbers from rendered search/category pages. Once you have part numbers, use your own product API or CAD/data-sheet pipeline for detailed assets.
This project is not affiliated with, endorsed by, or sponsored by McMaster-Carr.
https://www.mcmaster.comSeleniumBase downloads a matching driver automatically on first use. The first live request can take longer than later requests.
For exact-part resolution, provide an OpenAI API key with OPENAI_API_KEY, --openai-api-key-file, or --openai-api-key. No other OpenAI or model configuration is required.
pip install mcmaster-navigator-mcpYou can also send someone a built wheel:
pip install /path/to/mcmaster_navigator_mcp-0.5.4-py3-none-any.whlFor local development:
python -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"For MCP clients, the lowest-friction config is:
{
"mcpServers": {
"mcmaster-navigator": {
"command": "uvx",
"args": ["mcmaster-navigator-mcp"]
}
}
}If you install it into an environment yourself:
{
"mcpServers": {
"mcmaster-navigator": {
"command": "mcmaster-navigator-mcp"
}
}
}For a local virtual environment, point the MCP client at the installed console script:
{
"mcpServers": {
"mcmaster-navigator": {
"command": "/absolute/path/to/.venv/bin/mcmaster-navigator-mcp"
}
}
}Do not commit API keys into MCP config files. Prefer exporting OPENAI_API_KEY in your shell or using your MCP client's secret-management mechanism.
The normal package setup is to launch the MCP server with OPENAI_API_KEY in its environment:
export OPENAI_API_KEY="YOUR_OPENAI_API_KEY"
mcmaster-navigator-mcpFor MCP clients that can pass environment variables directly:
{
"mcpServers": {
"mcmaster-navigator": {
"command": "uvx",
"args": ["mcmaster-navigator-mcp"],
"env": {
"OPENAI_API_KEY": "YOUR_OPENAI_API_KEY"
}
}
}
}If you prefer keeping the secret in a local file outside the repo, pass the file path:
{
"mcpServers": {
"mcmaster-navigator": {
"command": "uvx",
"args": [
"mcmaster-navigator-mcp",
"--openai-api-key-file",
"/absolute/path/to/openai_api_key.txt"
]
}
}
}Direct key passing is also supported for clients that inject command arguments securely:
{
"mcpServers": {
"mcmaster-navigator": {
"command": "mcmaster-navigator-mcp",
"args": ["--openai-api-key", "YOUR_OPENAI_API_KEY"]
}
}
}Prefer OPENAI_API_KEY or --openai-api-key-file on shared machines because command-line arguments can be visible to process-list tools.
mcmaster_find_exact_part: best default when the user supplied enough detail to identify one catalog item. Uses the dynamic schema resolver, requires an OpenAI API key, and returns status: unique, ambiguous, unresolved, or error.mcmaster_find_parts: broad search. Searches and browses rendered pages, then returns part numbers.mcmaster_search: search McMaster and return the rendered page state.mcmaster_open: open a URL, path, part number, or search phrase.mcmaster_extract_schema: open/search a page and return dynamically extracted filters, table columns, row attributes, and part-number rows.mcmaster_follow_link: follow a link from the current page by index, text, or URL.mcmaster_current_page: inspect the current rendered page.mcmaster_back: go back in browser history.mcmaster_url: generate URLs without launching a browser.mcmaster_doctor: return environment diagnostics.mcmaster_close_browser: close/reset the headless browser worker.Ask your agent:
Use mcmaster_find_exact_part to find the part number for an 18-8 stainless steel socket head screw, M14 x 2 mm thread, 25 mm long, pack of 5.Expected output shape:
{
"description": "18-8 stainless steel socket head screw, M14 x 2 mm thread, 25 mm long, pack of 5",
"status": "unique",
"part_number": "90696A101",
"selected_part": {
"part_number": "90696A101",
"family": "Stainless Steel Socket Head Screws",
"groups": ["18-8 Stainless Steel", "M14 x 2 mm"],
"attributes": {
"Lg.": "25 mm",
"Pkg. Qty.": "5"
}
},
"candidates": [
{
"part_number": "90696A101",
"family": "Stainless Steel Socket Head Screws",
"groups": ["18-8 Stainless Steel", "M14 x 2 mm"],
"attributes": {
"Lg.": "25 mm",
"Pkg. Qty.": "5"
}
}
],
"pages_visited": []
}mcmaster_extract_schema exposes the live option schema found on rendered McMaster pages instead of assuming a fixed ontology for screws, springs, switches, fittings, and other part families.
Example output shape:
{
"title": "Stainless Steel Socket Head Screws | McMaster-Carr",
"schemas": [
{
"family_title": "Stainless Steel Socket Head Screws",
"filters": [
{"text": "M14 x 2 mm", "url": "https://www.mcmaster.com/..."}
],
"tables": [
{
"title": "Stainless Steel Socket Head Screws",
"columns": ["Lg.", "Pkg. Qty."],
"rows": [
{
"part_number": "90696A101",
"family": "Stainless Steel Socket Head Screws",
"groups": ["18-8 Stainless Steel", "M14 x 2 mm"],
"attributes": {
"Lg.": "25 mm",
"Pkg. Qty.": "5"
}
}
]
}
]
}
]
}Agents can use this as a dynamic catalog interface: first discover the fields available on the current product-family page, then match normalized component constraints against the extracted row attributes.
mcmaster_find_exact_part uses dynamic schema resolution. The flow is:
Family:, Group:, selected-option, model-number, and attribute labels against the live schema. If the first mapping conflicts with the live schema, GPT repairs the mapping from the extracted field/value schema.The resolver returns one part only when the filtered live rows have one unique part number. If zero rows match, it returns unresolved. If multiple rows still match, it returns the matching part numbers as ambiguous.
OPENAI_API_KEY: OpenAI API key for mcmaster_find_exact_part. Required unless --openai-api-key-file or --openai-api-key is provided.Optional browser/runtime tuning:
MCMASTER_NAV_PROFILE_DIR: optional persistent Chrome profile directory. Default: a temporary isolated profile per server process.MCMASTER_NAV_PAGE_TIMEOUT: Selenium page load timeout in seconds. Default: 45.MCMASTER_NAV_SETTLE_SECONDS: render settle delay after navigation. Default: 3.MCMASTER_NAV_AUTO_DRILL_DEPTH: category levels to auto-open during search. Default: 2.MCMASTER_NAV_MAX_PRODUCTS: maximum products extracted from one page. Default: 80.MCMASTER_NAV_MAX_LINKS: maximum links extracted from one page. Default: 100.MCMASTER_NAV_TOOL_TIMEOUT: MCP tool timeout in seconds. Default: 300.The benchmark scripts stay in benchmarks/ for paper runs, but they are excluded from the PyPI source distribution. Results are written under ignored benchmark_runs/ directories.
Exact recovery:
export OPENAI_API_KEY="..."
MCMASTER_NAV_SETTLE_SECONDS=2 python benchmarks/mcmaster_retrieval_benchmark.py \
--selector llm-schema --target 250 --max-pages 8 --auto-drill-depth 2 \
--llm-token-budget 2500000Nonexistent and broad ambiguity checks:
export OPENAI_API_KEY="..."
python benchmarks/negative_ambiguity_benchmark.py \
--source-run benchmark_runs/llm_schema_250_general2 \
--target-per-kind 25 --kinds nonexistent,ambiguousNear-ambiguity checks:
export OPENAI_API_KEY="..."
python benchmarks/near_ambiguity_benchmark.py \
--source-run benchmark_runs/llm_schema_250_general2 \
--target 25Build locally:
python -m build
twine check dist/*Publish:
twine upload dist/*Use a package name and project description that clearly identify this as an unofficial navigator MCP.
This package should pass the local checks before publishing:
python -m pytest -q
python -m build
twine check dist/*For a live smoke test, run the server through an MCP client and call mcmaster_find_parts with a query such as brass ball valve.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.