Is io.github.HayoDev/crystallize-mcp safe to use?

io.github.HayoDev/crystallize-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.HayoDev/crystallize-mcp?

io.github.HayoDev/crystallize-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.HayoDev/crystallize-mcp?

io.github.HayoDev/crystallize-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.HayoDev/crystallize-mcp actively maintained?

io.github.HayoDev/crystallize-mcp is recently maintained — last commit was 46 days ago.

io.github.HayoDev/crystallize-mcp

@hayodev/crystallize-mcp

Crystallize headless commerce tools for AI agents via Model Context Protocol

128/wk 0 tools GitHub npm

No known CVEs

No license

Maintained

Last commit 46d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "crystallize": {
      "env": {
        "CRYSTALLIZE_TENANT_IDENTIFIER": "your-tenant"
      },
      "args": [
        "-y",
        "@hayodev/crystallize-mcp@latest"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-hayodev-crystallize-mcp)](https://mcppedia.org/s/io-github-hayodev-crystallize-mcp)

Read me

What io.github.HayoDev/crystallize-mcp does

MCP server for Crystallize headless commerce. Gives AI agents read and write access to your catalogue, products, shapes, orders, customers, and tenant config — with deep links back to the Crystallize UI, dry-run safety for mutations, and PII masking for customer data.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@hayodev/crystallize-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

53/100across 5 weighted dimensions

How we score →

0255075100

−47

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @hayodev/crystallize-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.HayoDev/crystallize-mcp safe to use?: io.github.HayoDev/crystallize-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.HayoDev/crystallize-mcp?: io.github.HayoDev/crystallize-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.HayoDev/crystallize-mcp?: io.github.HayoDev/crystallize-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.HayoDev/crystallize-mcp actively maintained?: io.github.HayoDev/crystallize-mcp is recently maintained — last commit was 46 days ago.

Similar servers

Others in ecommerce

View all →

Cob Shopify Mcp90

Production-grade MCP server and CLI tool for Shopify Admin GraphQL API — 49+ tools, YAML-extensible, dual auth, dual transport, Docker-ready

11 6

Commerce Mcp89

A command line tool for setting up commercetools MCP server

2 12

io.github.sailorpepe/undesirables-mcp-server89

35+ AI tools for TCG card grading, Monte Carlo pricing, 370K+ product search. BYOK.

Mcp Reference Server88

This is the reference implementation for the mcp server

32 12

MCP Security Weekly

Get CVE alerts and security updates for io.github.HayoDev/crystallize-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "crystallize": {
      "env": {
        "CRYSTALLIZE_TENANT_IDENTIFIER": "your-tenant"
      },
      "args": [
        "-y",
        "@hayodev/crystallize-mcp@latest"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-hayodev-crystallize-mcp)](https://mcppedia.org/s/io-github-hayodev-crystallize-mcp)

Read me

What io.github.HayoDev/crystallize-mcp does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@hayodev/crystallize-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Crystallize MCP

Works with Claude Code, Claude Desktop, Cursor, Windsurf, Copilot, and any MCP-compatible client.

Getting started

Setup wizard

The interactive wizard handles config, auth tokens, keychain storage, and PII mode in one step:

# Project-level — writes .mcp.json in the current directory (shared with your team)
npx @hayodev/crystallize-mcp --setup

# Global — registers via `claude mcp add` (Claude Code) or writes Claude Desktop config
npx @hayodev/crystallize-mcp --setup --global

Manual config

Standard MCP config (works in any client):

{
  "mcpServers": {
    "crystallize": {
      "command": "npx",
      "args": ["-y", "@hayodev/crystallize-mcp@latest"],
      "env": {
        "CRYSTALLIZE_TENANT_IDENTIFIER": "your-tenant"
      }
    }
  }
}

Add CRYSTALLIZE_ACCESS_TOKEN_ID and CRYSTALLIZE_ACCESS_TOKEN_SECRET to the env block for PIM tools (shapes, orders, customers). See Authentication.

Claude Code (CLI)

claude mcp add crystallize \
  -e CRYSTALLIZE_TENANT_IDENTIFIER=your-tenant \
  -e CRYSTALLIZE_ACCESS_TOKEN_ID=your-token-id \
  -e CRYSTALLIZE_ACCESS_TOKEN_SECRET=your-token-secret \
  -- npx -y @hayodev/crystallize-mcp@latest

Use --scope project to write to .mcp.json (shared with your team) or --scope user for personal use across all projects.

Claude Desktop

Add the standard config to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows).

Cursor

Add the standard config to your Cursor MCP settings (~/.cursor/mcp.json or the project-level .cursor/mcp.json).

VS Code / GitHub Copilot

Add the standard config to .vscode/mcp.json in your project root.

{
  "servers": {
    "crystallize": {
      "command": "npx",
      "args": ["-y", "@hayodev/crystallize-mcp@latest"],
      "env": {
        "CRYSTALLIZE_TENANT_IDENTIFIER": "your-tenant",
        "CRYSTALLIZE_ACCESS_TOKEN_ID": "your-token-id",
        "CRYSTALLIZE_ACCESS_TOKEN_SECRET": "your-token-secret"
      }
    }
  }
}

Windsurf

Add the standard config to ~/.codeium/windsurf/mcp_config.json.

Gemini CLI

Add the standard config to ~/.gemini/settings.json.

JetBrains AI Assistant

Add the standard config to .junie/mcp.json in your project root.

Warp

Add the standard config to ~/.warp/mcp.json.

Raycast

Open "Install MCP Server" in Raycast and fill in:

Command: npx
Arguments: -y @hayodev/crystallize-mcp@latest
Environment: add CRYSTALLIZE_TENANT_IDENTIFIER and your token vars

Or copy the standard config JSON above before opening the command — Raycast will auto-fill the form.

From source (maintainers)

The --local flag is for developing crystallize

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

53/100across 5 weighted dimensions

How we score →

0255075100

−47

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @hayodev/crystallize-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.HayoDev/crystallize-mcp safe to use?: io.github.HayoDev/crystallize-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.HayoDev/crystallize-mcp?: io.github.HayoDev/crystallize-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.HayoDev/crystallize-mcp?: io.github.HayoDev/crystallize-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.HayoDev/crystallize-mcp actively maintained?: io.github.HayoDev/crystallize-mcp is recently maintained — last commit was 46 days ago.