Is io.github.erikras/store-canary safe to use?

io.github.erikras/store-canary has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.erikras/store-canary?

io.github.erikras/store-canary supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.erikras/store-canary?

io.github.erikras/store-canary is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is io.github.erikras/store-canary actively maintained?

io.github.erikras/store-canary is actively maintained - last commit was 14 days ago.

io.github.erikras/store-canary

Free read-only WooCommerce checks: store, SSL, exposure, SEO, speed, products, policies + 3 prompts

GitHub

No known CVEs

MIT license

Actively maintained

Last commit 14d ago

Works with most clients

Transport: http

0 tools

Grade F

MCPpedia last refreshed this data 1h ago

Edit this pageView history

io.github.erikras/store-canary is an MCP server that free read-only WooCommerce checks: store, SSL, exposure, SEO, speed, products, policies + 3 prompts. Its tool list has not been published yet over http, requires no API key, and scores 41/100 on MCPpedia's security, maintenance and efficiency rubric.

E-Commerce

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "store-canary": {
      "url": "https://mcp.storecanary.app/mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-erikras-store-canary)](https://mcppedia.org/s/io-github-erikras-store-canary)

Read me

What io.github.erikras/store-canary does

Free read-only WooCommerce checks: store, SSL, exposure, SEO, speed, products, policies + 3 prompts

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

41/100across 5 weighted dimensions

How we score →

0255075100

−59

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.erikras/store-canary safe to use?: io.github.erikras/store-canary has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.erikras/store-canary?: io.github.erikras/store-canary supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.erikras/store-canary?: io.github.erikras/store-canary is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.erikras/store-canary actively maintained?: io.github.erikras/store-canary is actively maintained - last commit was 14 days ago.

Similar servers

Others in ecommerce

View all →

io.github.cwasley/earnrate91

Which credit card earns the most at a merchant, from your cards or every card, and why.

1 5

Ru Marketplace Mcp90

Read-only MCP servers for Russian marketplaces: prices, stock, ratings, reviews, seller identity

187 8

com.astranl/mcp90

Dutch construction facts with measured accuracy + NL coordination. Never holds third-party funds.

Eplan MCP90

MCP server for EPLAN Electric P8: ~200 tools to drive EPLAN from Claude Code, Codex, Cursor or any MCP client (actions, scripts, live DataModel, exports). Includes the eplan-tools plugin marketplace.

150 7

MCP Security Weekly

Get CVE alerts and security updates for io.github.erikras/store-canary and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "store-canary": {
      "url": "https://mcp.storecanary.app/mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-erikras-store-canary)](https://mcppedia.org/s/io-github-erikras-store-canary)

Read me

What io.github.erikras/store-canary does

Free read-only WooCommerce checks: store, SSL, exposure, SEO, speed, products, policies + 3 prompts

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

Store Canary MCP connector

A free, hosted, read-only MCP server that checks a public WooCommerce store from the outside and answers in plain pass / warn / fail lines. No account, no API key, no install.

Connector address: https://mcp.storecanary.app/mcp (Streamable HTTP, no authentication)

Docs: https://storecanary.app/mcp

This repository only documents the hosted connector. It contains no server code.

Tools (all read-only)

Tool	What it checks
`check_store`	Overall health: homepage reachable, HTTPS valid and redirects sane, WooCommerce detected, `/cart/` and `/checkout/` load, payment markers visible on checkout.
`check_ssl`	Certificate accepted, `http://` permanently redirects to `https://`, short HTTPS-only redirect chain, HSTS header set.
`check_exposure`	WordPress, WooCommerce, plugin and PHP versions shown publicly, a public `/readme.html`, a readable `/wp-content/debug.log` (log contents are never returned or kept).
`check_seo_basics`	`robots.txt` (and whether it blocks the whole site), the XML sitemap, homepage title and meta description, homepage `noindex`.
`check_speed`	Times one download each of the homepage, one product page and the cart (one sample per page, not a lab test).
`check_products`	Samples up to 10 published products from the public WooCommerce Store API for missing prices, missing images and out-of-stock items.
`check_policies`	Homepage links to privacy, terms, shipping and returns/refunds pages, and each linked page loads.
`explain_finding`	Explains any finding code (e.g. `ssl_hsts`, `exposure_debug_log`) in plain words, with a suggested fix. Makes no network requests.

Every tool takes a store url (except explain_finding, which takes a code). Checks use GET requests only: they never log in, add to cart or submit forms. Each runs once, when you ask; nothing is monitored or scheduled.

Starter prompts

black_friday_audit — Audit my WooCommerce store before Black Friday. Runs all seven checks and turns them into a prioritized pre-sale fix list.
checkout_check — Is my checkout working? Checks that the cart, checkout and payment methods load, and explains anything that doesn't.
explain_finding — Explain this finding. Explains a Store Canary finding id with a suggested fix.

Setup

ChatGPT

Until Store Canary is in ChatGPT's app directory, enable developer mode and add a custom connector with the URL https://mcp.storecanary.app/mcp/chatgpt and no authentication.

Claude

Open Settings → Connectors → Add custom connector and paste https://mcp.storecanary.app/mcp.

Cursor

Add to your mcp.json:

{
  "mcpServers": {
    "store-canary": { "url": "https://mcp.storecanary.app/mcp" }
  }
}

Cline and other MCP clients

Add a remote server over Streamable HTTP at https://mcp.storecanary.app/mcp. No auth headers are needed. For clients that only speak stdio:

{
  "mcpServers": {
    "store-canary": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.storecanary.app/mcp"]
    }
  }
}

Then ask: "Check my store at example.com with Store Canary."

Limits and safety

Up to 10 checks a minute per connection, plus a shared cap.
About five GET requests per check, no cookies, done in under 10 seconds. Requests identify as StoreCanaryBot.
Public web addresses only: no IP addresses, private networks or unusual ports.

Privacy

Store Canary does not store the store URLs you check, their results, or your IP address. See the privacy policy.

Support

Email support@storecanary.app or visit https://storecanary.app/mcp.

Built by Form Nerd, LLC. Licensed under MIT.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

41/100across 5 weighted dimensions

How we score →

0255075100

−59

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.erikras/store-canary safe to use?: io.github.erikras/store-canary has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.erikras/store-canary?: io.github.erikras/store-canary supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.erikras/store-canary?: io.github.erikras/store-canary is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.erikras/store-canary actively maintained?: io.github.erikras/store-canary is actively maintained - last commit was 14 days ago.

Similar servers

Others in ecommerce

View all →

io.github.cwasley/earnrate91

Which credit card earns the most at a merchant, from your cards or every card, and why.

1 5

Ru Marketplace Mcp90

Read-only MCP servers for Russian marketplaces: prices, stock, ratings, reviews, seller identity

187 8

com.astranl/mcp90

Dutch construction facts with measured accuracy + NL coordination. Never holds third-party funds.

Eplan MCP90

MCP server for EPLAN Electric P8: ~200 tools to drive EPLAN from Claude Code, Codex, Cursor or any MCP client (actions, scripts, live DataModel, exports). Includes the eplan-tools plugin marketplace.

150 7

MCP Security Weekly

Get CVE alerts and security updates for io.github.erikras/store-canary and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?