Daily Argentina food & beverage price index, source-cited from public retailer prices.
MCPpedia last refreshed this data
io.github.oscarlopez-gif/argentina-price-index is an MCP server that daily Argentina food & beverage price index, source-cited from public retailer prices. Its tool list has not been published yet over http, requires no API key, and scores 56/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"io-github-oscarlopez-gif-argentina-price-index": {
"args": [
"-y",
"wrangler"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
A minimal, working test of the video's core mechanic: one agent request becomes a paid transaction at the edge. A Cloudflare Worker serves a live-computed price index from D1, gated by an x402-style 402 → pay → retry → data loop. Payment is mocked (shared-secret HMAC) so the whole loop runs with zero wallet setup; swapping in real x402 is a localized change.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'wrangler' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
Wrangler affected by OS Command Injection in `wrangler pages deploy`
**Summary** A command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. **Root cause** The `commitHash` variable, derived from user input via the `--commit-hash` CLI argument, is interpolated directl
Arbitrary remote code execution within `wrangler dev` Workers sandbox
### Impact The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. `wrangler dev` would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary code. Additionally, the inspector server did not validate `Origin`/`Host` headers, granting an attacker that can trick any user on the local network into opening a malicious website the ability
Arbitrary remote file read in Wrangler dev server
### Impact Sending specially crafted HTTP requests and inspector messages to Wrangler's dev server could result in any file on the user's computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file. ### Patches This issue was fixed in `wrangler@3.19.0`. Wrangler will now only serve files that are part of your bundle, or referenced by your bundle's source maps. ### Workarounds Configure Wr
Cloudflare Wrangler directory traversal vulnerability
### Impact The Wrangler command line tool (<=wrangler@3.1.0 or <=wrangler@2.20.1) was affected by a directory traversal vulnerability when running a local development server for Pages (wrangler pages dev command). This vulnerability enabled an attacker in the same network as the victim to connect to the local development server and access the victim's files present outside of the directory for the development server. ### Patches Wrangler2: Upgrade to v2.20.1 or higher. Wrangler3: Upgrade to v3
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in ecommerce
Девять российских маркетплейсов и китайский Taobao как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, Мегамаркет, Lamoda, DNS, Ситилинк. Плюс сравнение цен по всем сразу. Только чтение, ключи не нужны.
A command line tool for setting up commercetools MCP server
MCP server for Salesforce B2C Commerce Cloud development assistance
35+ AI tools for TCG card grading, Monte Carlo pricing, 370K+ product search. BYOK.
MCP Security Weekly
Get CVE alerts and security updates for io.github.oscarlopez-gif/argentina-price-index and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
A minimal, working test of the video's core mechanic: one agent request becomes a paid transaction at the edge. A Cloudflare Worker serves a live-computed price index from D1, gated by an x402-style 402 → pay → retry → data loop. Payment is mocked (shared-secret HMAC) so the whole loop runs with zero wallet setup; swapping in real x402 is a localized change.
Data is synthetic.
seed/observations.sqlis generated placeholder data so the demo runs before a real scraper exists. Do not treat the numbers as real Argentine prices.
paid-door-index/
├─ wrangler.jsonc # Worker + D1 binding + sandbox vars
├─ schema.sql # price_observations + methodology (+ future index_series cache)
├─ seed/
│ ├─ generate.mjs # deterministic synthetic data generator (60 SKUs x 30 days)
│ └─ observations.sql # generated seed (1,800 rows)
├─ src/index.ts # Worker: routes + live index math + mock x402 gate
├─ agent/test-agent.mjs # the paying "buyer": request → 402 → pay → retry → data
└─ README.md
| Endpoint | Tier | Returns |
|---|---|---|
GET /v1/headline?country=AR&category=food_beverages | free | latest index value + monthly rate (the teaser) |
GET /v1/index?country=AR&category=food_beverages | paid ($0.02) | full daily series |
GET /v1/latest?country=AR&category=food_beverages | paid ($0.02) | latest reading + methodology |
POST /mcp | — | MCP JSON-RPC: initialize, tools/list, tools/call |
The Worker also speaks MCP over HTTP at /mcp, exposing two tools:
get_ar_food_headline (free) — latest value + 30-day rateget_ar_food_price_index (paid, $0.02 mock-x402) — full daily series; call once with no _payment to receive a challenge, then retry with arguments._payment = {nonce, resource, amount, signature}Test the full agent flow (with npm run dev running):
npm run agent:mcp # initialize → tools/list → free call → paid call (challenge → pay → data)
Production note:
/mcphere is a minimal JSON request/response subset of the Streamable HTTP transport (no SSE/sessions/auth). For a real deployment use the official MCP SDK or Cloudflare'sagentsMcpAgent, and replace the mock HMAC with a real x402 facilitator.
Index math (methodology_version = v0-simple-avg): index = 100 × mean(price_t / price_base) over in-stock SKUs, base = first day in the window. Upgrade path baked into the schema: geometric mean within category + Laspeyres across categories.
Prereqs: Node 18+ and a Cloudflare account (npx wrangler login).
cd paid-door-index
npm install
# 1. Create the D1 database, then paste the printed database_id into wrangler.jsonc
npm run db:create
# 2. Load schema + seed into LOCAL D1
npm run schema:local
npm run seed:gen # (optional) regenerate observations.sql
npm run seed:local
# 3. Start the Worker
npm run dev # serves http://127.0.0.1:8787
# 4. In a second terminal, run the paying agent
npm run agent
Expected agent output: the free headline, then a 402 with a price challenge, then a 200 with the full series and a PAYMENT-RESPONSE settlement header — one request turned into a transaction.
npm run schema:remote
npm run seed:remote
npm run deploy
# then point the agent at the deployed URL:
BASE=https://paid-door-index.<your-subdomain>.workers.dev npm run agent
Watch live logs with npx wrangler tail.
seed/generate.mjs with a scheduled Worker that scrapes 1–2 Argentine online grocers daily into price_observations.src/index.ts (verifyPayment / challenge) with a real x402 facilitator (POST /verify, POST /settle) per Cloudflare's Agents x402 docs.