Data we never see
SellerSheet holds no Amazon role for buyers' personal data — no names, no e-mail addresses, no street addresses, ever.
Amazon keeps buyers' personal information behind a separate, restricted role. SellerSheet does not hold that role and does not ask for it. So no tool — over MCP, the Tool API or the sidebar — can return a buyer's name, e-mail address, phone number or street address, and none of it is stored in your synced tables.
What an order shows
- Orders, items, quantities, prices, fees, taxes, promotions, fulfillment, packages and tracking — everything you need to run the order.
- Where it went, at most: the delivery city, country and postal code (the
RECIPIENTselector oforders_getOrderandorders_searchOrders). BUYERis not offered. Amazon's selector for buyer details is left out of SellerSheet's order tools, so no agent can ask for it.
What else SellerSheet never sees
- Your Seller Central password. You connect a store through Amazon's own consent page; SellerSheet receives only the API authorization for the permissions you approve, and you can revoke it in Seller Central → Manage Your Apps.
- Files outside your workspace. Drive tools list and search only inside your SellerSheet workspace folders, and a file named by its id must be yours or shared with you.
What your agent sees
Your AI client sees whatever its tools return to it — the data above, never more. What it does with that is between you and your AI provider: SellerSheet provides the MCP server, the AI is your own. See Stay in control.