vinted.fr logo
vinted.fr

scrape-products-read-posts

Installation

Adds this website's skill for your agents

 

Summary

Search the Vinted France catalog and return product listings via the public JSON API, then read any single listing's full post (description, condition, size, color, seller, location) from the rendered item page. Read-only.

FIG. 01
FIG. 02
FIG. 03
SKILL.md
197 lines

Vinted Product Scraping & Post Reading

Purpose

Search the Vinted France (vinted.fr) catalog for a query and return a page of product listings (id, title, price, brand, size, condition, seller, photos, favourite/view counts, canonical URL), then optionally open any single listing and read its full "post" — the seller's free-text description plus structured attributes (condition, color, size, category, upload date, seller name + location). The product list comes from Vinted's public JSON catalog API; individual post details come from the server-rendered item page (ld+json + DOM). Read-only — never buys, messages a seller, makes an offer, or logs in. (Vinted's robots.txt permits search/discovery but explicitly prohibits automated transactions, cart, and checkout — this skill stays on the allowed side.)

When to Use

  • Monitoring or bulk-collecting second-hand listings matching a query (e.g. "nike air max", a brand, a model).
  • Price research / market scans across the catalog with filters (price range, sort order, brand, size).
  • Pulling the full detail of one specific listing — description, condition, seller, location, photos — given its item URL or ID.
  • Anywhere you'd otherwise scrape Vinted search HTML: the JSON catalog API is faster and structurally cleaner than parsing the JS-rendered grid.

Workflow

Vinted's web UI is a thin client over a JSON API at /api/v2/..., but that API is bearer-gated — a cookieless request to /api/v2/catalog/items returns 401 with Www-Authenticate: Bearer realm="Vinted". The bearer/session cookies (_vinted_fr_session, access_token_web) are HttpOnly and are minted automatically when a browser loads any vinted.fr page. So the reliable pattern is hybrid: bootstrap auth with a real stealth browser session, then call the JSON API from inside that session (page-context fetch, or even a plain browse open to the API URL — cookies persist across navigations in the same session). A bare browse cloud fetch --proxies will not work for the API (no cookies → 401).

1. Open a stealth session and bootstrap auth cookies

sid=$(browse cloud sessions create --keep-alive --verified --proxies \
  | node -e "let s='';process.stdin.on('data',c=>s+=c).on('end',()=>process.stdout.write(JSON.parse(s).id))")
export BROWSE_SESSION="$sid"
browse open "https://www.vinted.fr/" --remote --session "$sid"
browse wait load --remote --session "$sid"

vinted.fr sits behind Cloudflare + DataDome. --verified --proxies is the recommended config (the homepage 302-redirects through Cloudflare on a cold request). The homepage load sets the HttpOnly auth cookies; every subsequent same-session request carries them.

2. Scrape products via the catalog API

Call the API from page context so the HttpOnly cookies attach:

browse eval --remote --session "$sid" \
  "(async()=>{const r=await fetch('/api/v2/catalog/items?search_text=nike+air+max&per_page=20&page=1&order=price_low_to_high&currency=EUR',{headers:{Accept:'application/json'}});return JSON.stringify(await r.json());})()"

Endpoint:

GET /api/v2/catalog/items
    ?search_text={url+encoded query}
    &per_page={1-96}
    &page={1..}
    &order={relevance|newest_first|price_low_to_high|price_high_to_low}
    &currency=EUR

Useful filters (append as query args; unrecognized ones are ignored): price_from, price_to, brand_ids[], catalog_ids[], size_ids[], status_ids[] (condition), color_ids[].

Response shape:

  • items[] — each item has id, title, price:{amount,currency_code}, total_item_price:{amount,...} (incl. buyer-protection fee), brand_title, size_title, status (condition), url, path, photo/photos[] (with thumbnails[]), favourite_count, view_count, user:{id,login,profile_url}.
  • pagination — {current_page, total_pages, total_entries, per_page, time}.

3. Read a single post

Open the item's url (an /items/{id}-slug page) and read the post. Two complementary sources on the rendered page:

browse open "https://www.vinted.fr/items/9216822059-nike-air-max-neuves-jamais-portees" --remote --session "$sid"
browse wait load --remote --session "$sid"
# (a) Clean structured data — the seller's description + product facts:
browse eval --remote --session "$sid" \
  "(()=>document.querySelector('script[type=\"application/ld+json\"]').textContent)()"
# (b) Richer DOM facts not in ld+json (views/favourites/seller/dates):
browse eval --remote --session "$sid" \
  "(()=>{const g=t=>{const e=document.querySelector('[data-testid=\"'+t+'\"]');return e?e.innerText.trim().replace(/\\s+/g,' '):null};const d=document.querySelector('[itemprop=\"description\"]');return JSON.stringify({price:g('item-price'),total:g('total-combined-price'),size:g('item-attributes-size'),condition:g('item-attributes-status'),color:g('item-attributes-color'),upload_date:g('item-attributes-upload_date'),seller:g('profile-username'),seller_location:g('seller-location'),favourites:g('favourite-button'),description:d?d.innerText.trim():null});})()"
  • The application/ld+json Product block gives: name, description (seller's free text), brand.name, offers.price/priceCurrency/availability/itemCondition, category, color, image.
  • The DOM data-testid fields give the human-facing extras: item-price, total-combined-price, item-attributes-size, item-attributes-status (condition), item-attributes-color, item-attributes-upload_date, profile-username, seller-location, favourite-button (favourite count). The description also lives at [itemprop="description"].

4. Release the session

browse cloud sessions update "$sid" --status REQUEST_RELEASE

Site-Specific Gotchas

  • The catalog API is bearer-gated, cookies are HttpOnly. A cookieless request to /api/v2/catalog/items → 401 Www-Authenticate: Bearer realm="Vinted". The _vinted_fr_session + access_token_web cookies are HttpOnly (invisible to document.cookie) and are set on the first page load. You must call the API from inside a live browser session — browse eval page-context fetch, or browse open <api-url> in the same session. browse cloud fetch --proxies (no cookies) gets 401 — don't use it for the API.
  • /api/v2/items/{id} returns 404 even for valid, live items. Do NOT use it to read a post — it's the wrong/deprecated endpoint and returns an HTML error page. Read post detail from the item page instead (ld+json + DOM as in step 3). Confirmed 404 across multiple valid item IDs and from both homepage and item-page contexts.
  • Two anti-bot layers: Cloudflare + DataDome. The homepage cold-loads via a 302 Cloudflare redirect, and a datadome cookie is issued. --verified --proxies is the recommended/validated config. (Observed: a bare Browserbase --remote session also got through during one validation run, but Cloudflare+DataDome posture changes — keep stealth ON for reliability.)
  • Prices are strings inside objects. price is {"amount":"20.0","currency_code":"EUR"} — amount is a string, not a number. total_item_price is the price plus Vinted's buyer-protection service fee (it's larger than price); use price.amount for the listing price and total_item_price.amount for what the buyer actually pays.
  • Pagination is effectively capped. pagination.total_entries reflects the filtered result count, but Vinted caps how deep you can page (deep page= values stop returning new items). For large result sets, narrow with filters (price_from/price_to, brand_ids[], catalog_ids[]) rather than paging thousands deep.
  • order values are enums — relevance (default), newest_first, price_low_to_high, price_high_to_low. Arbitrary strings are silently ignored (falls back to relevance).
  • Content is French. Titles, descriptions, condition labels ("État Neuf sans étiquette"), and upload dates ("Ajouté Il y a 4 heures") render in French. The ld+json itemCondition is a normalized schema.org value (NewCondition, etc.); prefer it if you need a language-neutral condition.
  • The item-attributes-brand-menu-button testid is sometimes empty. Fall back to ld+json brand.name or the catalog item's brand_title for the brand.
  • Read-only. robots.txt allows search/catalog crawling (Content-Signal: search=yes) but explicitly prohibits automated account creation, carts, checkouts, and any transaction simulation. Stop at the listing/post view — never click buy/offer/message.

Expected Output

Two outcome shapes (scrape list + read post), plus a blocked-failure shape.

// 1. Catalog scrape (step 2)
{
  "success": true,
  "query": "nike air max",
  "order": "price_low_to_high",
  "pagination": { "current_page": 1, "total_pages": 480, "total_entries": 960, "per_page": 20 },
  "products": [
    {
      "id": 9216822059,
      "title": "Nike air max neuves jamais portées",
      "price": "20.0",
      "total_item_price": "21.70",
      "currency": "EUR",
      "brand": "Nike",
      "size": "35.5",
      "condition": "Neuf sans étiquette",
      "favourite_count": 15,
      "view_count": 0,
      "seller": { "id": 41477397, "login": "em.ch", "profile_url": "https://www.vinted.fr/member/41477397-emch" },
      "photo": "https://images1.vinted.net/t/.../f800/....jpeg",
      "url": "https://www.vinted.fr/items/9216822059-nike-air-max-neuves-jamais-portees"
    }
  ]
}

// 2. Read post (step 3)
{
  "success": true,
  "post": {
    "id": 9216822059,
    "title": "Nike air max neuves jamais portées",
    "description": "Erreur de commande sur la pointure, elles n'ont jamais été portées, modèle beige et rose",
    "price": "20,00 €",
    "total_price": "21,70 €",
    "currency": "EUR",
    "brand": "Nike",
    "size": "35.5",
    "condition": "Neuf sans étiquette",
    "item_condition_schema": "NewCondition",
    "color": "Beige, Rose",
    "category": "Femmes Baskets",
    "upload_date": "Il y a 4 heures",
    "favourites": 15,
    "seller": "em.ch",
    "seller_location": "Paris, France",
    "image": "https://images1.vinted.net/t/.../f800/....webp",
    "url": "https://www.vinted.fr/items/9216822059-nike-air-max-neuves-jamais-portees"
  }
}

// 3. Blocked / unauthenticated (no live session cookies, or anti-bot wall)
{
  "success": false,
  "error_reasoning": "GET /api/v2/catalog/items returned 401 Www-Authenticate: Bearer — no _vinted_fr_session/access_token_web cookies. Bootstrap a stealth browser session on https://www.vinted.fr/ first, then call the API from page context."
}