# Shisha Market — full description for AI agents

> Marketplace of private pre-owned hookah listings (18+), relaunched in 2026 on https://shisha-market.com. Russia-first, with an English interface being prepared at https://shisha-market.com/en. Information only: no orders, payments, delivery, escrow or deal guarantees.

## Languages
- Russian: https://shisha-market.com/ (canonical root).
- English: https://shisha-market.com/en (home), https://shisha-market.com/en/mcp, https://shisha-market.com/en/legal. Listing texts remain user-generated and usually Russian.

## Catalog
- Home pages: https://shisha-market.com/ and https://shisha-market.com/en. Filters: q (text), city, category, page. Hash #catalog anchors the list.
- Categories: hookahs, bowls, accessories.
- Listing states: pending (under review), published, rejected, archived. Only published listings and their images are public.
- Listing pages: https://shisha-market.com/listings/{id}; media: https://shisha-market.com/media/{id} (access checked per listing).
- Prices are integer kopecks in the database and shown in RUB; no currency conversion or payment exists.

## Moderation and rules
- Every listing is reviewed manually before publication. Publication rules: https://shisha-market.com/legal/rules; English: https://shisha-market.com/en/legal/rules.
- Not accepted: tobacco and nicotine products, smoking mixtures, vapes, e-cigarettes, liquids and consumables; narcotic, counterfeit and stolen goods; commercial catalogs, batches, pre-orders and resale.
- One listing describes one personal item with the author's own photos, actual condition, city and country.
- Contact is allowed only via a profile link (vk.ru, vk.com, t.me). Personal data must not appear in the description or images.
- When server-side autoposting is enabled, an approved listing may also be posted to the project VK community (photo, title, price, city and a link); form contacts, full name and email are not transferred.

## MCP for operators
- Documentation: https://shisha-market.com/mcp (Russian), https://shisha-market.com/en/mcp (English).
- Client download: https://shisha-market.com/mcp/listings.mjs (standard newline-delimited stdio JSON-RPC 2.0; MCP 2025-11-25 with older version negotiation; explicit legacy Content-Length requests receive framed responses).
- Authentication: Authorization: Bearer <operator token>; token from SHISHA_OPERATOR_TOKEN or ~/.config/shisha-market/operator.token. Endpoints answer 404 when no token is configured and 401 for a wrong token.
- Tools:
  - create_listing: title, description, category (hookahs|bowls|accessories), city, price (RUB string), contactUrl, photos (1-6 local JPG/PNG/WebP paths, up to 8 MB combined), optional country (default RU), optional publish (default false). Returns {id, status, revision, url}. Keep publish=false unless the user explicitly approves public publication.
  - list_pending: returns {items} — up to 50 records ordered by updatedAt, each with id, title, city, category, revision, createdAt, updatedAt.
  - get_listing: id. Full text, price, status, moderation note, revision, canEdit, actual publiclyVisible flag and photo IDs. Does not expose login email or consent full name.
  - get_listing_photo: id and photoId from get_listing. Returns a private photo as MCP image content for review. No public image link or token in the URL is needed.
  - update_listing: id, revision, and fields to change; optional photos (local paths) and keepPhotoIds. Only operator-owned active/rejected listings; omitted fields and photos are retained. Every correction returns to pending, including after publication.
  - archive_listing: id and current revision. Withdraws only an operator-owned listing from the site; not physical deletion or removal of existing VK posts.
  - moderate_listing: id, decision (published|rejected), revision from the queue, optional note (at least 3 characters for rejection). A stale revision is refused; re-fetch the queue before deciding. Returns {id, status}.
- Operator setup: first sign in with the operator email on the website and accept the current documents; ordinary users must not receive the operator token. MCP uses this separate operator credential, not an email/OTP login flow.
- HTTP endpoints: GET/POST https://shisha-market.com/api/operator/listings; GET/PATCH/POST https://shisha-market.com/api/operator/listings/{id}; GET https://shisha-market.com/api/operator/listings/{id}/photos/{photoId}; POST https://shisha-market.com/api/operator/listings/{id}/archive. All are token-protected.
- Never silently replace a stale revision or repeat creation after a network timeout: inspect the queue first to avoid duplicates.

## Agent resources
- Status JSON: https://shisha-market.com/ai/status — analytics connectivity (Yandex Metrika counter 113672611, Google Analytics 4 stream G-E9YMQQ5CXW) and Google Search Console visibility (28-day window), refreshed on request.
- Sitemap: https://shisha-market.com/sitemap.xml. Robots: https://shisha-market.com/robots.txt.
- Legal documents: https://shisha-market.com/legal; English versions: https://shisha-market.com/en/legal (terms, rules, privacy, cookies, contacts). Consent forms remain Russian-only.
- Wiki (Russian): https://shisha-market.com/wiki — brands, bowls, tobacco, charcoal, accessories.
- Brandbook: https://shisha-market.com/brand.

## Restrictions for agents
- Do not scrape personal data, contact links or images for mass use, resale or advertising.
- Do not present the site as a payment, delivery or escrow service.
- Moderation decisions are made by humans; the operator API requires an explicit token.

## Contact
hello@shisha-market.com