Skip to main content
Glama
Redser06

Merchant Web MCP

by Redser06

Merchant Web MCP β€” Agent Analytics & Operability Prototype

Turn any e-commerce storefront into an observable, measurable, and transactable platform for AI shopping agents.

Build & Test Protocol Spec License


NOTE

Prototype & Simulation Notice: This repository contains an interactive simulation cockpit and prototype of the proposed BigCommerce / Merchant Web MCP plugin architecture. The simulation engine runs client-side with simulated latency, genuine Web Crypto HMAC-SHA256 signing, real 15-minute TTL inventory reservation timers, and an executive Agent Intent Analytics dashboard.


🎯 The Core Problem & Value Proposition

The Near-Term Reality: Blindness to Agent Traffic

Today, merchants are blind to AI shopping agents (ChatGPT Agent, Claude, Perplexity, Apple Intelligence). When bots scrape product pages:

  • Traffic is indistinguishable from dumb web scrapers.

  • Visual scraping consumes 6,000–10,000 tokens per page and frequently breaks on React hydration or DOM redesigns.

  • Merchants have zero visibility into what products agents are searching for, what queries fail, and what commercial demand passes through uncaptured.

The Solution: BigCommerce Merchant Web MCP

  1. Agent Intent Analytics (Immediate SaaS Value): Captures incoming agent sessions, tool executions, discovered intent value (Β£124k+ pipeline), provider breakdown, and catalog demand gaps.

  2. Deterministic MCP Interface: Exposes structured JSON-RPC tools (search_products, get_product_details, check_variant_stock, apply_promotions, add_to_cart_session, create_checkout_session).

  3. Verified Cryptographic Handoff: Generates signed checkout URLs using genuine Web Crypto HMAC-SHA256 tokens with 15-minute ephemeral inventory soft-locks.


Related MCP server: Shopify Agentic MCP Gateway

πŸ—οΈ Architecture Overview

β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚                   AI Shopping Agent                    β”‚
β”‚             (Claude / ChatGPT / Perplexity)            β”‚
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
                            β”‚ (1) Discover: /.well-known/mcp.json
                            β”‚ (2) Transport: HTTP / SSE Stream
                            β–Ό
β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚             Merchant Web MCP Plugin Engine             β”‚
β”‚  β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”  β”‚
β”‚  β”‚ Layered Security Guard (Unicode Filter & Regex)  β”‚  β”‚
β”‚  β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜  β”‚
β”‚                           β”‚                             β”‚
β”‚  β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β–Όβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”  β”‚
β”‚  β”‚ Standardized MCP Tools:                          β”‚  β”‚
β”‚  β”‚  β€’ search_products(query, max_price, waterproof) β”‚  β”‚
β”‚  β”‚  β€’ check_variant_stock(variant_id, postal_code)  β”‚  β”‚
β”‚  β”‚  β€’ apply_promotions(promo_code, subtotal)        β”‚  β”‚
β”‚  β”‚  β€’ add_to_cart_session(variant_id, qty) [15m TTL]β”‚  β”‚
β”‚  β”‚  β€’ create_checkout_session (WebCrypto HMAC SHA256β”‚  β”‚
β”‚  β”‚  β€’ get_store_policies()                          β”‚  β”‚
β”‚  β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜  β”‚
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”Όβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
                            β”‚
            β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
            β–Ό                               β–Ό
β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”       β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚ Merchant Catalog / DB β”‚       β”‚ Storefront Cart & DOM β”‚
β”‚ (BigCommerce / D1)    β”‚       β”‚ (Live State Sync)     β”‚
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜       β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜

πŸš€ Running the Cockpit & Tests

Quick Start

# 1. Install dependencies
bun install

# 2. Run test suite (7 tests, 27 assertions)
bun test

# 3. Start development server
bun run dev

Live Deployments


πŸ›‘οΈ Security & Integrity Highlights in this Repo

  • Genuine Web Crypto HMAC-SHA256: Implemented in src/mcp/cryptoAuth.ts using standard crypto.subtle. Signatures are cryptographically verified upon checkout session generation.

  • Active TTL Inventory Expiration: Implemented in src/mcp/merchantMcpEngine.ts. Ephemeral reservations expire after 900 seconds (15 mins), automatically returning stock to available inventory and notifying the client wire HUD.

  • Layered Defense-in-Depth: Implemented in src/mcp/securityGuard.ts. Normalizes Unicode/zero-width obfuscation and scans across customer reviews, search queries, and promo arguments.

  • Multi-Cart Isolation: Engine maps carts explicitly by cart_id, rejecting checkout attempts on invalid or foreign cart sessions.


πŸ—ΊοΈ Roadmap & Production Specification

For the target Cloudflare Worker + BigCommerce edge server specification, see ROADMAP.md.

A
license - permissive license
Not graded
quality - not tested
C
maintenance

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

View all related MCP servers

Related MCP Connectors

  • Commission infrastructure for AI commerce β€” program discovery, attribution, and settlement.

  • Agent-native commerce with trusted catalog, durable carts, and Stripe Checkout via MCP and UCP.

  • Agent-native product catalog for AI shopping agents. 296M+ products, 28 countries.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Redser06/merchant-web-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server