Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"io-github-mishrasanjeev-grantex": {
"args": [
"-y",
"@grantex/sdk"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
What OAuth 2.0 is to humans, Grantex is to agents.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@grantex/sdk' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked @grantex/sdk against OSV.dev.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security
An evil MCP server used for redteam testing
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.
mcpki-server is the backend infrastructure for https://www.mcpki.org, enabling secure public key management and autonomous certificate handling for large language models (LLMs).
MCP Security Weekly
Get CVE alerts and security updates for io.github.mishrasanjeev/grantex and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
What OAuth 2.0 is to humans, Grantex is to agents.
Docs | Playground | Spec | Dashboard | IETF Draft
Grantex Commerce V1 is the closed-beta consent, Commerce Passport, policy, audit, and payment-control layer for agentic checkout. It lets commerce agents use sandbox catalog data, create carts, request user consent, receive a scoped Commerce Passport, and exercise mock provider payment intents without giving the agent direct access to payment providers.
Production Commerce V1 discovery is disabled/fail-closed. Live checkout, live payments, and live Plural are not enabled. Public demos and playgrounds are mock-provider only until legal, compliance, security, operations, and provider approvals are complete.
flowchart LR
user[User] --> agent[AgenticOrg Commerce Sales Agent]
agent --> gx[Grantex Commerce REST/MCP]
gx --> consent[Consent and Passport]
gx --> policy[Policy, amount caps, audit]
gx --> catalog[Catalog, cart, inventory]
gx --> provider[Provider-neutral payment intent]
provider --> mock[Mock provider verified in smoke]
provider -. blocked .-> plural[Future live Plural gate]
| Area | Current posture |
|---|---|
| Internal sandbox | Implemented for synthetic catalog, consent, passport, cart, payment, webhook, and audit flows. |
| Temporary Option A smoke | Verified with mock provider and cleaned-up smoke resources. |
| AgenticOrg real-staging handoff | Verified through Grantex-only tools with redacted fixture handling. |
| Hosted AgenticOrg discovery | Verified in temporary API-only hosted smoke. |
| Production read-only discovery | Disabled/fail-closed. |
| Live checkout/payments | Blocked pending legal, compliance, security, operations, and provider approvals. |
| Live Plural | Blocked; mock provider only in current evidence. |
Start with the Commerce V1 overview, then use the developer guide, merchant/operator guide, and [operations g