Is io.github.semorehq/mcp-commerce safe to use?

io.github.semorehq/mcp-commerce has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.semorehq/mcp-commerce?

io.github.semorehq/mcp-commerce can be installed by cloning its GitHub repository and following the setup instructions in the README.

What can io.github.semorehq/mcp-commerce do?

io.github.semorehq/mcp-commerce provides 5 tools: search_product, get_product, create_cart, quote_checkout, submit_intent. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.semorehq/mcp-commerce?

io.github.semorehq/mcp-commerce is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.semorehq/mcp-commerce actively maintained?

io.github.semorehq/mcp-commerce is recently maintained — last commit was 32 days ago.

io.github.semorehq/mcp-commerce

Semore K-product MCP server: search K-beauty/fashion/pop, cross-border carts, AP2-signed checkout.

5 tools GitHub

No known CVEs

No license

Maintained

Last commit 32d ago

Works with most clients

Transport: stdio

5 tools · ~471 tok

Grade A · 0.2% of 200K ctx

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-semorehq-mcp-commerce": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-semorehq-mcp-commerce)](https://mcppedia.org/s/io-github-semorehq-mcp-commerce)

Read me

What io.github.semorehq/mcp-commerce does

Semore K-product MCP server: search K-beauty/fashion/pop, cross-border carts, AP2-signed checkout.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

66/100across 5 weighted dimensions

How we score →

0255075100

−34

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (5)

Click any tool to inspect its schema.

~471 tokens total

Help improve this page

This server is missing a description.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.semorehq/mcp-commerce safe to use?: io.github.semorehq/mcp-commerce has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.semorehq/mcp-commerce?: io.github.semorehq/mcp-commerce can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can io.github.semorehq/mcp-commerce do?: io.github.semorehq/mcp-commerce provides 5 tools: search_product, get_product, create_cart, quote_checkout, submit_intent. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.semorehq/mcp-commerce?: io.github.semorehq/mcp-commerce is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.semorehq/mcp-commerce actively maintained?: io.github.semorehq/mcp-commerce is recently maintained — last commit was 32 days ago.

Similar servers

Others in ecommerce

View all →

Cob Shopify Mcp90

Production-grade MCP server and CLI tool for Shopify Admin GraphQL API — 49+ tools, YAML-extensible, dual auth, dual transport, Docker-ready

11 6

Commerce Mcp89

A command line tool for setting up commercetools MCP server

2 12

io.github.sailorpepe/undesirables-mcp-server89

35+ AI tools for TCG card grading, Monte Carlo pricing, 370K+ product search. BYOK.

Mcp Reference Server88

This is the reference implementation for the mcp server

32 12

MCP Security Weekly

Get CVE alerts and security updates for io.github.semorehq/mcp-commerce and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-semorehq-mcp-commerce": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-semorehq-mcp-commerce)](https://mcppedia.org/s/io-github-semorehq-mcp-commerce)

Read me

What io.github.semorehq/mcp-commerce does

Semore K-product MCP server: search K-beauty/fashion/pop, cross-border carts, AP2-signed checkout.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

@semore/mcp-commerce

Reference Model Context Protocol (MCP) server for K-product cross-border commerce — five canonical tools that every agent-ready storefront should expose.

#	Tool	Purpose
1	`search_product`	Keyword / category / price / locale search across the K-product catalog
2	`get_product`	Fetch a single SKU's full detail (i18n title/description, HS code, ship-from, lead time)
3	`create_cart`	Build cart with destination — returns itemized quote (subtotal + shipping + duty + import tax)
4	`quote_checkout`	Re-quote cart immediately before checkout (refresh FX/duty), returns canonical CartMandate VC
5	`submit_intent`	Submit AP2 IntentMandate VC + signed CartMandate, returns checkout URL + signed PaymentMandate

Canonical 5-tool surface per the Semore MCP commerce spec. Production Semore MCP server runs at https://mcp.semore.net. This OSS package ships schemas + reference handlers so merchants can validate integrations locally.

Install

npm install @semore/mcp-commerce zod

Use the published MCP server (Claude Desktop / ChatGPT / Gemini)

// Claude Desktop config — `claude_desktop_config.json`
{
  "mcpServers": {
    "semore": {
      "command": "npx",
      "args": ["-y", "@semore/mcp-commerce"]
    }
  }
}

Or discover via the official MCP Registry:

curl "https://registry.modelcontextprotocol.io/v0/servers?search=semore"
# → io.github.semorehq/mcp-commerce@0.4.2

Usage — schema-only (validate integrations)

import { searchProductTool } from "@semore/mcp-commerce/tools/search-product";

const parsed = searchProductTool.inputSchema.parse({
  q: "sunscreen",
  lang: "en",
  category: "kbeauty",
  limit: 10,
});

const result = await searchProductTool.handler(parsed);

Usage — boot a minimal MCP server

import { createMcpServer } from "@semore/mcp-commerce";

const server = createMcpServer({
  // Wire your own catalog / cart / order resolvers here.
  // Default skeleton resolvers return deterministic fixtures useful for local tests.
});

// Then expose over your preferred transport (stdio, streamable-http, SSE).

Companion adapters (5-protocol multi-adapter)

Adapter	Spec	Status
@semore/acp-adapter	ACP (Stripe / PayPal)	LIVE
@semore/ap2-adapter	AP2 (Google) — IntentMandate / CartMandate / PaymentMandate VC	LIVE
@semore/ucp-adapter	UCP (Google + Shopify)	LIVE
Visa TAP / MC Agent Pay	Network agentic standards	Phase 1 (signup)

Compliance & trust

PCI: SAQ-A (no PAN/CVV transit through the MCP server)
PIPA §28-8: cross-border consent flow active
AP2: did:web:semore.net Ed25519 mandate signing (4-party card model preserved)
UCP: /ucp/capability endpoint advertises commerce.search/commerce.cart/commerce.checkout

Reference

MCP spec: https://modelcontextprotocol.io
Official MCP Registry: <https://registry.modelcontext

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

66/100across 5 weighted dimensions

How we score →

0255075100

−34

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (5)

Click any tool to inspect its schema.

~471 tokens total

Help improve this page

This server is missing a description.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.semorehq/mcp-commerce safe to use?: io.github.semorehq/mcp-commerce has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.semorehq/mcp-commerce?: io.github.semorehq/mcp-commerce can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can io.github.semorehq/mcp-commerce do?: io.github.semorehq/mcp-commerce provides 5 tools: search_product, get_product, create_cart, quote_checkout, submit_intent. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.semorehq/mcp-commerce?: io.github.semorehq/mcp-commerce is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.semorehq/mcp-commerce actively maintained?: io.github.semorehq/mcp-commerce is recently maintained — last commit was 32 days ago.