Is io.github.IsaiahDupree/commercebridge safe to use?

io.github.IsaiahDupree/commercebridge has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.IsaiahDupree/commercebridge?

io.github.IsaiahDupree/commercebridge supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.IsaiahDupree/commercebridge?

io.github.IsaiahDupree/commercebridge is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.IsaiahDupree/commercebridge actively maintained?

io.github.IsaiahDupree/commercebridge is actively maintained — last commit was 22 days ago.

io.github.IsaiahDupree/commercebridge

vercel

Remote MCP connector for eBay, Shopify, Best Buy & Etsy marketplace data via the Commerce API

3.7M/wk GitHub npm

No known CVEs

No license

Actively maintained

Last commit 22d ago

Works with most clients

Transport:

0 tools

Grade F

MCPpedia last refreshed this data 8h ago

Edit this pageView history

io.github.IsaiahDupree/commercebridge is an MCP server that remote MCP connector for eBay, Shopify, Best Buy & Etsy marketplace data via the Commerce API. Its tool list has not been published yet, requires no API key, and scores 55/100 on MCPpedia's security, maintenance and efficiency rubric.

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-isaiahdupree-commercebridge": {
      "args": [
        "-y",
        "vercel"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-isaiahdupree-commercebridge)](https://mcppedia.org/s/io-github-isaiahdupree-commercebridge)

Read me

What io.github.IsaiahDupree/commercebridge does

A remote MCP server that wraps the live Commerce API — eBay, Shopify, Best Buy, and Etsy marketplace data behind one /v1 contract — as MCP tools any agent (Claude, ChatGPT, etc.) can call directly.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'vercel' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

55/100across 5 weighted dimensions

How we score →

0255075100

−45

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-44479medium · fixedCVSS 5.5

Vercel: Non-interactive mode includes CLI arguments in suggested command output

# Summary When the Vercel CLI runs in non-interactive mode (`--non-interactive` or auto-detected AI agent), commands that cannot complete autonomously emit JSON payloads with suggested follow-up commands. If the user authenticated via `--token` or `-t` on the command line, the token value is included verbatim in those suggestions. # Conditions All three must be true for the token to appear in output: 1. Token passed as a CLI argument (`--token` / `-t`). The `VERCEL_TOKEN` environment variabl

Affected: >= 50.16.0Fixed in 52.0.1source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.IsaiahDupree/commercebridge safe to use?: io.github.IsaiahDupree/commercebridge has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.IsaiahDupree/commercebridge?: io.github.IsaiahDupree/commercebridge supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.IsaiahDupree/commercebridge?: io.github.IsaiahDupree/commercebridge is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.IsaiahDupree/commercebridge actively maintained?: io.github.IsaiahDupree/commercebridge is actively maintained — last commit was 22 days ago.

Similar servers

Others in ecommerce

View all →

Ru Marketplace Mcp93

Девять российских маркетплейсов и китайский Taobao как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, Мегамаркет, Lamoda, DNS, Ситилинк. Плюс сравнение цен по всем сразу. Только чтение, ключи не нужны.

68 8

Commerce Mcp89

A command line tool for setting up commercetools MCP server

4 12

io.github.sailorpepe/undesirables-mcp-server89

35+ AI tools for TCG card grading, Monte Carlo pricing, 370K+ product search. BYOK.

2 5

io.github.mguozhen/voc-amazon-reviews-mcp88

Amazon review intelligence via Shulex OpenAPI. 10 marketplaces, verified-purchase & Vine signals.

33 6

MCP Security Weekly

Get CVE alerts and security updates for io.github.IsaiahDupree/commercebridge and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-isaiahdupree-commercebridge": {
      "args": [
        "-y",
        "vercel"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-isaiahdupree-commercebridge)](https://mcppedia.org/s/io-github-isaiahdupree-commercebridge)

Read me

What io.github.IsaiahDupree/commercebridge does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'vercel' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

CommerceBridge

A remote MCP server that wraps the live Commerce API — eBay, Shopify, Best Buy, and Etsy marketplace data behind one /v1 contract — as MCP tools any agent (Claude, ChatGPT, etc.) can call directly.

Live: https://commercebridge-isaiahduprees-projects.vercel.app/mcp (Vercel project commercebridge, team isaiahduprees-projects) — 14 tools, verified against real production data (Shopify live; eBay/Best Buy/Etsy honestly gated until their upstream app keys are provisioned). Naming note: the clean commercebridge.vercel.app alias is owned by an unrelated third-party product (a WhatsApp-commerce chatbot) — use the team-scoped URL above, same situation as commerce-api's alias collision.

CommerceBridge does no scraping and holds no data of its own: every tool is a thin, faithful fetch relay to the upstream Commerce API. Whatever that API returns comes back unmodified, including its errors.

Why Authentication: None

This connector's underlying data — eBay/Shopify/Best Buy/Etsy marketplace listings — is fully public and carries zero per-user state. There is no account to log into, nothing to authorize, and nothing to bill per-seat. So, deliberately, CommerceBridge has:

No OAuth — no login flow, no token exchange, no /.well-known/oauth-* endpoints
No Supabase — no user table, no session storage
No billing — no plans, no usage metering, no upgrade gate

This is the same architectural call this org made for StoreBridge, its sibling connector over App Store/Google Play data: public read-only marketplace data gets the lean, stateless build. It is deliberately leaner than this org's OAuth-based Bridge-family connectors (RemindersBridge, MessagesBridge, etc.), which proxy a signed-in user's own private data and do need auth.

Tools

14 tools, one per Commerce API endpoint, grouped by marketplace/engine:

eBay — needs `EBAY_CLIENT_ID` / `EBAY_CLIENT_SECRET` on the upstream deployment

Tool	Endpoint	What it does
`search_ebay`	`GET /v1/search`	Search live eBay listings by keyword/category across 8 sites (US, GB, DE, AU, CA, FR, IT, ES)
`get_ebay_item`	`GET /v1/item`	Get one eBay item's full detail by REST id or legacy id
`get_ebay_items`	`GET /v1/items`	Bulk-fetch up to 20 eBay items in one call
`search_ebay_sold`	`GET /v1/sold`	Sold/completed-item comps — needs eBay's separately-gated Marketplace Insights API

Shopify — keyless, live right now

Tool	Endpoint	What it does
`search_shopify_products`	`GET /v1/shopify/products`	List any public Shopify store's catalog from its own `/products.json`
`get_shopify_product`	`GET /v1/shopify/product`	Get one product by handle
`get_shopify_collections`	`GET /v1/shopify/collections`	List a store's collections
`search_shopify`	`GET /v1/shopify/search`	Keyword-filter a store's catalog (title/vendor/type/tags)

Best Buy — not yet live upstream (route pending redeploy, then needs `BESTBUY_API_KEY`)

Tool	Endpoint	What it does
`search_bestbuy`	`GET /v1/bestbuy/search`	Search Best Buy's US catalog by keyword/category
`get_bestbuy_product`	`GET /v1/bestbuy/product`	Get one product by SKU

Etsy — not yet live upstream (route pending redeploy, then needs `ETSY_KEYSTRING` + `ETSY_SHARED_SECRET`)

Tool	Endpoint	What it does
`search_etsy`	`GET /v1/etsy/search`	Site-wide active-listing keyword search
`get_etsy_listing`	`GET /v1/etsy/listing`	Get one listing (only endpoint where `views` is populated)
`get_etsy_shop`	`GET /v1/etsy/shop`	Get one shop by `shop_id` or `shop_name`
`get_etsy_shop_listings`	`GET /v1/etsy/shop/listings`	List a shop's active listings

Every tool is annotated {readOnlyHint:true, destructiveHint:false, idempotentHint:true, openWorldHint:true} — read-only, non-dest

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

55/100across 5 weighted dimensions

How we score →

0255075100

−45

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-44479medium · fixedCVSS 5.5

Vercel: Non-interactive mode includes CLI arguments in suggested command output

Affected: >= 50.16.0Fixed in 52.0.1source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.IsaiahDupree/commercebridge safe to use?: io.github.IsaiahDupree/commercebridge has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.IsaiahDupree/commercebridge?: io.github.IsaiahDupree/commercebridge supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.IsaiahDupree/commercebridge?: io.github.IsaiahDupree/commercebridge is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.IsaiahDupree/commercebridge actively maintained?: io.github.IsaiahDupree/commercebridge is actively maintained — last commit was 22 days ago.

Similar servers

Others in ecommerce

A command line tool for setting up commercetools MCP server

4 12

io.github.sailorpepe/undesirables-mcp-server89

35+ AI tools for TCG card grading, Monte Carlo pricing, 370K+ product search. BYOK.

2 5

io.github.mguozhen/voc-amazon-reviews-mcp88

Amazon review intelligence via Shulex OpenAPI. 10 marketplaces, verified-purchase & Vine signals.

33 6

MCP Security Weekly

Get CVE alerts and security updates for io.github.IsaiahDupree/commercebridge and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

io.github.IsaiahDupree/commercebridge

Install in your client

What io.github.IsaiahDupree/commercebridge does

Test This Server

Why this score

55/100across 5 weighted dimensions

Security

Reviews

Frequently Asked Questions

Similar servers

Discussion

io.github.IsaiahDupree/commercebridge

Install in your client

What io.github.IsaiahDupree/commercebridge does

Test This Server

CommerceBridge

Why Authentication: None

Tools

eBay — needs EBAY_CLIENT_ID / EBAY_CLIENT_SECRET on the upstream deployment

Shopify — keyless, live right now

Best Buy — not yet live upstream (route pending redeploy, then needs BESTBUY_API_KEY)

Etsy — not yet live upstream (route pending redeploy, then needs ETSY_KEYSTRING + ETSY_SHARED_SECRET)

Why this score

55/100across 5 weighted dimensions

Security

Reviews

Frequently Asked Questions

Similar servers

Discussion

CommerceBridge

Why Authentication: None

Tools

eBay — needs EBAY_CLIENT_ID / EBAY_CLIENT_SECRET on the upstream deployment

Shopify — keyless, live right now

Best Buy — not yet live upstream (route pending redeploy, then needs BESTBUY_API_KEY)

Etsy — not yet live upstream (route pending redeploy, then needs ETSY_KEYSTRING + ETSY_SHARED_SECRET)

eBay — needs `EBAY_CLIENT_ID` / `EBAY_CLIENT_SECRET` on the upstream deployment

Best Buy — not yet live upstream (route pending redeploy, then needs `BESTBUY_API_KEY`)

Etsy — not yet live upstream (route pending redeploy, then needs `ETSY_KEYSTRING` + `ETSY_SHARED_SECRET`)

eBay — needs `EBAY_CLIENT_ID` / `EBAY_CLIENT_SECRET` on the upstream deployment

Best Buy — not yet live upstream (route pending redeploy, then needs `BESTBUY_API_KEY`)

Etsy — not yet live upstream (route pending redeploy, then needs `ETSY_KEYSTRING` + `ETSY_SHARED_SECRET`)