Merchant Web MCP
Provides BigCommerce merchants with tools for AI agents to search products, check variant stock, apply promotions, manage cart sessions with 15-minute inventory reservations, create signed checkout sessions, and access store policies, along with agent intent analytics.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Merchant Web MCPsearch for waterproof jackets under $150 and add one to my cart"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Merchant Web MCP β Agent Analytics & Operability Prototype
Turn any e-commerce storefront into an observable, measurable, and transactable platform for AI shopping agents.
Prototype & Simulation Notice: This repository contains an interactive simulation cockpit and prototype of the proposed BigCommerce / Merchant Web MCP plugin architecture. The simulation engine runs client-side with simulated latency, genuine Web Crypto HMAC-SHA256 signing, real 15-minute TTL inventory reservation timers, and an executive Agent Intent Analytics dashboard.
π― The Core Problem & Value Proposition
The Near-Term Reality: Blindness to Agent Traffic
Today, merchants are blind to AI shopping agents (ChatGPT Agent, Claude, Perplexity, Apple Intelligence). When bots scrape product pages:
Traffic is indistinguishable from dumb web scrapers.
Visual scraping consumes 6,000β10,000 tokens per page and frequently breaks on React hydration or DOM redesigns.
Merchants have zero visibility into what products agents are searching for, what queries fail, and what commercial demand passes through uncaptured.
The Solution: BigCommerce Merchant Web MCP
Agent Intent Analytics (Immediate SaaS Value): Captures incoming agent sessions, tool executions, discovered intent value (Β£124k+ pipeline), provider breakdown, and catalog demand gaps.
Deterministic MCP Interface: Exposes structured JSON-RPC tools (
search_products,get_product_details,check_variant_stock,apply_promotions,add_to_cart_session,create_checkout_session).Verified Cryptographic Handoff: Generates signed checkout URLs using genuine Web Crypto HMAC-SHA256 tokens with 15-minute ephemeral inventory soft-locks.
Related MCP server: Shopify Agentic MCP Gateway
ποΈ Architecture Overview
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β AI Shopping Agent β
β (Claude / ChatGPT / Perplexity) β
βββββββββββββββββββββββββββββ¬βββββββββββββββββββββββββββββ
β (1) Discover: /.well-known/mcp.json
β (2) Transport: HTTP / SSE Stream
βΌ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Merchant Web MCP Plugin Engine β
β ββββββββββββββββββββββββββββββββββββββββββββββββββββ β
β β Layered Security Guard (Unicode Filter & Regex) β β
β ββββββββββββββββββββββββββ¬ββββββββββββββββββββββββββ β
β β β
β ββββββββββββββββββββββββββΌββββββββββββββββββββββββββ β
β β Standardized MCP Tools: β β
β β β’ search_products(query, max_price, waterproof) β β
β β β’ check_variant_stock(variant_id, postal_code) β β
β β β’ apply_promotions(promo_code, subtotal) β β
β β β’ add_to_cart_session(variant_id, qty) [15m TTL]β β
β β β’ create_checkout_session (WebCrypto HMAC SHA256β β
β β β’ get_store_policies() β β
β ββββββββββββββββββββββββββ¬ββββββββββββββββββββββββββ β
βββββββββββββββββββββββββββββΌβββββββββββββββββββββββββββββ
β
βββββββββββββββββ΄ββββββββββββββββ
βΌ βΌ
βββββββββββββββββββββββββ βββββββββββββββββββββββββ
β Merchant Catalog / DB β β Storefront Cart & DOM β
β (BigCommerce / D1) β β (Live State Sync) β
βββββββββββββββββββββββββ βββββββββββββββββββββββββπ Running the Cockpit & Tests
Quick Start
# 1. Install dependencies
bun install
# 2. Run test suite (7 tests, 27 assertions)
bun test
# 3. Start development server
bun run devLive Deployments
Interactive Simulation Cockpit: https://merchant-web-mcp.web.app
Standalone Projector Demo (Single File HTML): https://merchant-web-mcp.web.app/demos/merchant-web-mcp-demo-v2.html
π‘οΈ Security & Integrity Highlights in this Repo
Genuine Web Crypto HMAC-SHA256: Implemented in
src/mcp/cryptoAuth.tsusing standardcrypto.subtle. Signatures are cryptographically verified upon checkout session generation.Active TTL Inventory Expiration: Implemented in
src/mcp/merchantMcpEngine.ts. Ephemeral reservations expire after 900 seconds (15 mins), automatically returning stock to available inventory and notifying the client wire HUD.Layered Defense-in-Depth: Implemented in
src/mcp/securityGuard.ts. Normalizes Unicode/zero-width obfuscation and scans across customer reviews, search queries, and promo arguments.Multi-Cart Isolation: Engine maps carts explicitly by
cart_id, rejecting checkout attempts on invalid or foreign cart sessions.
πΊοΈ Roadmap & Production Specification
For the target Cloudflare Worker + BigCommerce edge server specification, see ROADMAP.md.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceEnables AI agents to perform e-commerce operations through a standardized interface implementing the x402 and Agentic Commerce Protocol (ACP). Supports merchant sessions, product search, and payment orchestration with production-ready security features.
- AlicenseAqualityFmaintenanceEnables AI agents to autonomously browse inventory, negotiate terms, manage carts, and execute secure payments on Shopify stores using standardized protocols. It provides a bridge for LLMs to handle the entire commerce lifecycle from discovery to order tracking through a verifiable mandate chain.52MIT
- FlicenseNot gradedqualityBmaintenanceEnables AI agents to discover products, build carts, and complete purchases across multiple downstream commerce services through a secure, contract-driven API.
- FlicenseNot gradedqualityDmaintenanceEnables AI agents to browse product catalogs, search products with filters, and initiate checkouts, generating order summaries and checkout URLs.
Related MCP Connectors
Commission infrastructure for AI commerce β program discovery, attribution, and settlement.
Agent-native commerce with trusted catalog, durable carts, and Stripe Checkout via MCP and UCP.
Agent-native product catalog for AI shopping agents. 296M+ products, 28 countries.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Redser06/merchant-web-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server