Is io.github.CloudCorpRecords/shelfsignal safe to use?

io.github.CloudCorpRecords/shelfsignal has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.CloudCorpRecords/shelfsignal?

io.github.CloudCorpRecords/shelfsignal supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.CloudCorpRecords/shelfsignal?

io.github.CloudCorpRecords/shelfsignal is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is io.github.CloudCorpRecords/shelfsignal actively maintained?

io.github.CloudCorpRecords/shelfsignal is actively maintained - last commit was 17 days ago.

io.github.CloudCorpRecords/shelfsignal

@reneturcios/shelfsignal

The open store index for AI agents: merchants list real stock, agents find local food and stores.

75/wk GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 17d ago

Works with most clients

Transport: stdio, sse

0 tools

Grade F

MCPpedia last refreshed this data 5h ago

Edit this pageView history

io.github.CloudCorpRecords/shelfsignal is an MCP server that the open store index for AI agents: merchants list real stock, agents find local food and stores. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 59/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML E-Commerce

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-cloudcorprecords-shelfsignal": {
      "args": [
        "-y",
        "@reneturcios/shelfsignal"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-cloudcorprecords-shelfsignal)](https://mcppedia.org/s/io-github-cloudcorprecords-shelfsignal)

Read me

What io.github.CloudCorpRecords/shelfsignal does

The open store index for AI agents: merchants list real stock, agents find local food and stores.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@reneturcios/shelfsignal' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

59/100across 5 weighted dimensions

How we score →

0255075100

−41

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @reneturcios/shelfsignal against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.CloudCorpRecords/shelfsignal safe to use?: io.github.CloudCorpRecords/shelfsignal has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.CloudCorpRecords/shelfsignal?: io.github.CloudCorpRecords/shelfsignal supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.CloudCorpRecords/shelfsignal?: io.github.CloudCorpRecords/shelfsignal is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is io.github.CloudCorpRecords/shelfsignal actively maintained?: io.github.CloudCorpRecords/shelfsignal is actively maintained - last commit was 17 days ago.

Similar servers

Others in ai-ml / ecommerce

View all →

Codebase Memory Mcp95

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

48.6k 6

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

108.8k 8

Bla95

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

5.4k 1

io.github.callstack/agent-device95

Open source device layer for AI agents: control mobile, web, TV, and desktop apps over MCP

5.4k 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.CloudCorpRecords/shelfsignal and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML E-Commerce

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-cloudcorprecords-shelfsignal": {
      "args": [
        "-y",
        "@reneturcios/shelfsignal"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-cloudcorprecords-shelfsignal)](https://mcppedia.org/s/io-github-cloudcorprecords-shelfsignal)

Read me

What io.github.CloudCorpRecords/shelfsignal does

The open store index for AI agents: merchants list real stock, agents find local food and stores.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@reneturcios/shelfsignal' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

ShelfSignal

The open store index for AI agents.

Local merchants list what they actually sell. AI agents find real food and real products nearby, score how likely each item is actually in stock, and check a validation receipt before they send a human across town. Merchants pay one flat price to get listed. Nobody takes 30% of their food.

DoorDash and the delivery apps built a closed index: they own the customer, scrape or rent the menu, charge the merchant 15-30% per order, and still cannot tell you whether the kitchen has the thing you want. ShelfSignal is the opposite shape:

Merchant-owned listing. The store submits its own stuff, its own prices, its own stock. The listing belongs to the merchant, not the platform.
Built for agents, not ads. One MCP server any agent can query: find stores, find items, check stock, validate the listing. No sponsored placement, ever.
Stock is a scored signal, not a claim. Every item carries a last-confirmed date. The likelihood engine turns that evidence into a 0-100 score with printed reasons, so agents stop bluffing "they have it" and start saying "confirmed today, likely in stock."
Validation receipts. Every listing carries checks an agent can verify: complete profile, real prices, fresh inventory, declared fulfillment. Tier: VERIFIED, LISTED, STALE, or INCOMPLETE.
Flat money. $100 Starter Store, one time, listed and validated. No per-order commission. See docs/PRICING.md. Merchants can join by email: docs/EMAIL-INTAKE.md.

Quick start

npm install
npm run build
npm test

node dist/cli.js coverage
node dist/cli.js search "birria" --city "San Francisco"
node dist/cli.js stock sf-mission-taqueria-demo "Birria tacos"
node dist/cli.js nearby 37.7599 -122.4148 --radius 5
node dist/cli.js ping sf-sunset-bakery-demo "Cardamom knot" in
node dist/cli.js validate sf-mission-taqueria-demo
node dist/cli.js doctor
node dist/cli.js mcp        # run the MCP server (stdio)
node dist/cli.js serve      # run the hosted registry API (http://0.0.0.0:8787)

Hosted registry API

A read-only HTTP API over the same registry, for agents and clients that do not speak MCP:

curl localhost:8787/v1/stores?city=San%20Francisco
curl localhost:8787/v1/stores/sf-mission-taqueria-demo
curl "localhost:8787/v1/search?q=birria"

Only listings in the live state are served: listings still in the intake queue are excluded from list and search, and their detail route returns 404. Full reference: docs/API.md.

MCP tools

Tool	What it does
`search_stores`	Find stores by text, city, category, or type (with open-now signal)
`find_nearby`	Stores near a lat/lng point, nearest first, with distance and open-now
`search_items`	Find a food or product across stores, every hit carrying its stock verdict
`get_store`	Full listing: hours, address, fulfillment, items, stock
`check_stock`	Stock-likelihood verdict (score, band, reasons) for one item
`validate_store`	Validation receipt and tier for one listing
`submit_store`	Validate a merchant intake and preview its listing + receipt
`list_coverage`	Cities, categories, and store count in the index

For merchants

You run a store in the city. For $100 you get listed where the agents look:

Fill the intake (10 minutes): who you are, where you are, your hours, and the stuff you sell with real prices. Template: examples/submission.example.json, field guide: docs/INTAKE.md.
We validate it and your listing goes live with its first receipt.
Update stock whenever it changes with one command or one message. Fresh listings rank as VERIFIED; stale ones decay honestly instead of lying to customers.

No commission. No tablet on your counter. No competing with your own listing.

How it works

The registry is the source of truth: `registry/stores.json

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

59/100across 5 weighted dimensions

How we score →

0255075100

−41

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @reneturcios/shelfsignal against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.CloudCorpRecords/shelfsignal safe to use?: io.github.CloudCorpRecords/shelfsignal has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.CloudCorpRecords/shelfsignal?: io.github.CloudCorpRecords/shelfsignal supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.CloudCorpRecords/shelfsignal?: io.github.CloudCorpRecords/shelfsignal is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is io.github.CloudCorpRecords/shelfsignal actively maintained?: io.github.CloudCorpRecords/shelfsignal is actively maintained - last commit was 17 days ago.