Is Pcexpress MCP Server safe to use?

Pcexpress MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under AGPL-3.0.

How do I install Pcexpress MCP Server?

Pcexpress MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with Pcexpress MCP Server?

Pcexpress MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is Pcexpress MCP Server actively maintained?

Pcexpress MCP Server is actively maintained — last commit was 5 days ago. It has 8 GitHub stars.

Pcexpress MCP Server

Name: Pcexpress MCP Server
Author: FireBall1725

by FireBall1725

AI-powered grocery cart control for PC Express/Loblaws stores via Model Context Protocol (MCP)

8 GitHub

No known CVEs

AGPL-3.0 license

Actively maintained

Last commit 5d ago

Works with most clients

Transport: stdio

0 tools

Grade F

MCPpedia last refreshed this data 17h ago

Edit this pageView history

Pcexpress MCP Server is an MCP server that AI-powered grocery cart control for PC Express/Loblaws stores via Model Context Protocol (MCP). Its tool list has not been published yet over stdio, requires no API key, and scores 42/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML Cloud

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "pcexpress": {
      "env": {
        "PCEXPRESS_BANNER": "zehrs",
        "PCEXPRESS_STORE_ID": "your_store",
        "PCEXPRESS_STATE_DIR": "~/.pcexpress-mcp",
        "PCEXPRESS_REFRESH_TOKEN": "your_refresh_token"
      },
      "args": [
        "/path/to/pcexpress_mcp_server.py"
      ],
      "command": "python3"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/pcexpress-mcp-server)](https://mcppedia.org/s/pcexpress-mcp-server)

Read me

What Pcexpress MCP Server does

Unofficial Model Context Protocol (MCP) server for PC Express / Loblaws grocery shopping

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

42/100across 5 weighted dimensions

How we score →

0255075100

−58

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Pcexpress MCP Server safe to use?: Pcexpress MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under AGPL-3.0.
How do I install Pcexpress MCP Server?: Pcexpress MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Pcexpress MCP Server?: Pcexpress MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is Pcexpress MCP Server actively maintained?: Pcexpress MCP Server is actively maintained — last commit was 5 days ago. It has 8 GitHub stars.

Similar servers

Others in ai-ml / cloud

View all →

Dsh MCP Client97

MCP client bridge: connects to MCP servers and registers their tools on ctx.tools

196.7k 4

Gpt Researcher97

An autonomous agent that conducts deep research on any data using any LLM providers

29.2k 5

Modelcontextprotocol96

The official MCP server implementation for the Perplexity API Platform

2.5k 4

io.github.mims-harvard/tooluniverse96

1000+ scientific tools for AI scientists: life science, reserach, literature, and more.

1.7k 4

MCP Security Weekly

Get CVE alerts and security updates for Pcexpress MCP Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML Cloud

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "pcexpress": {
      "env": {
        "PCEXPRESS_BANNER": "zehrs",
        "PCEXPRESS_STORE_ID": "your_store",
        "PCEXPRESS_STATE_DIR": "~/.pcexpress-mcp",
        "PCEXPRESS_REFRESH_TOKEN": "your_refresh_token"
      },
      "args": [
        "/path/to/pcexpress_mcp_server.py"
      ],
      "command": "python3"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/pcexpress-mcp-server)](https://mcppedia.org/s/pcexpress-mcp-server)

Read me

What Pcexpress MCP Server does

Unofficial Model Context Protocol (MCP) server for PC Express / Loblaws grocery shopping

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

PC Express MCP Server

Unofficial Model Context Protocol (MCP) server for PC Express / Loblaws grocery shopping

Control your grocery cart with AI! This MCP server enables LLMs (like Claude) to search past orders, find products, and manage your shopping cart across all Loblaws-owned grocery banners.

How the auth was cracked: the login sits behind Akamai bot detection, so the OAuth flow was reverse-engineered out of Loblaw's Android app. If you want the emulator-and-mitmproxy story behind pcid_config.py, read the write-up: Reverse-engineering PC Express.

⚠️ Important Disclaimers

Unofficial: This project is NOT affiliated with, endorsed by, or supported by Loblaws Companies Limited, PC Express, or any related entities
Use at Your Own Risk: This uses an undocumented API that may change without notice
No Warranty: See LICENSE for details
Educational Purpose: This project demonstrates API reverse engineering and MCP server development

🛒 Supported Grocery Banners

Works with all PC Express enabled stores:

Zehrs - Ontario-based grocery chain
Loblaws - Main flagship banner
No Frills - Discount grocery banner
Real Canadian Superstore - Western Canada supermarket
Your Independent Grocer - Franchise stores
T&T Supermarket - Asian specialty supermarket

✨ Features

MCP Tools (6)

search_past_orders - Find items from your order history
get_order_items - Get detailed product list from specific orders
search_products - Search the product catalog
add_to_cart - Add products to your shopping cart
remove_from_cart - Remove items from cart
view_cart - See current cart contents

Integration Ready

✅ Home Assistant - Voice-controlled grocery shopping
✅ Claude Desktop - Chat with your grocery list
✅ Custom Clients - Any MCP-compatible application

Voice Assistant Examples

🎤 "Add ice cream to my grocery cart"
🎤 "What did I order last week?"
🎤 "Search for organic bananas"
🎤 "What's in my cart?"

🚀 Quick Start

Prerequisites

Python 3.10 or higher
Active account with a PC Express enabled banner
pip or pip3

Installation

Clone the repository

git clone https://github.com/FireBall1725/pcexpress-mcp-server.git
cd pcexpress-mcp-server

Install dependencies
```
pip install -r requirements.txt
```

Configure credentials

cp .env.example .env
# Edit .env with your credentials (see Configuration section)

Test the connection
```
python test_api.py
```
Run the server
```
python pcexpress_mcp_server.py
```

⚙️ Configuration

Getting Your Credentials

Authentication uses the PC Express app's OAuth flow. You sign in once in a real browser to get a refresh token; after that the server mints access tokens on its own and never needs another manual login. See AUTH_NOTES.md for how it works, and DEPLOYMENT.md for running it locally, in Docker, Home Assistant, or Kubernetes.

Easiest: run the setup wizard; it logs you in and writes the config for wherever you run it:

python setup.py

The manual steps below are the same thing, done by hand.

One-time login

python login_pcid.py

It opens your browser to the PC ID sign-in. After you log in, the page tries to open a com.loblaw.pcx://... link and shows an error; that is expected. Copy that full address from the address bar and paste it back into the script. It prints your PCEXPRESS_REFRESH_TOKEN. The app client secret is baked in

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

42/100across 5 weighted dimensions

How we score →

0255075100

−58

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Pcexpress MCP Server safe to use?: Pcexpress MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under AGPL-3.0.
How do I install Pcexpress MCP Server?: Pcexpress MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Pcexpress MCP Server?: Pcexpress MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is Pcexpress MCP Server actively maintained?: Pcexpress MCP Server is actively maintained — last commit was 5 days ago. It has 8 GitHub stars.