Open-source B2B and marketplace ecommerce; new stores include an MCP server for AI agents.
Relvato
Overview
Description from the maker (original English)
Website monitoring: uptime, checkout, SEO (Search Console, Bing), security, speed, DNS, compliance.
PopNx MCP’s three pillars
These three are never merged into one score: opinions, measurements and popularity are different things.
- User voiceiNo reviews yetReviews open together with accounts in a later step
- Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
- UsageiNot measured yet★ –
What you can do with it
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
- Connection: Runs in the cloud
- Transport: Streamable HTTP
- Category: Online shops & payments
- You need to fill in: Authorization
Install
Pick the AI app you use, then copy the settings.
Before you install
- Basic checks: 1 of 1 passed
- Runs on the maker’s server: what you ask it goes through their server.
- You fill in yourself:
Authorization
Values marked secret are keys to your account. Never share them or paste them into a chat.
You need
- Runs in the cloudNothing to install; it connects over the internet
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Run this in your terminal
claude mcp add --transport http relvato https://app.relvato.com/api/mcp --header 'Authorization: Bearer {api_key}'Fill in the empty values before running it.
Or copy the settings yourself
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"relvato": {
"url": "https://app.relvato.com/api/mcp",
"headers": {
"Authorization": "Bearer {api_key}"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Or copy the settings yourself
Paste into .vscode/mcp.json in your project
{
"servers": {
"relvato": {
"type": "http",
"url": "https://app.relvato.com/api/mcp",
"headers": {
"Authorization": "Bearer {api_key}"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Your choice stays on this device in a cookie; no account needed.
Values you fill in
Authorizationsecret HTTP headerOptional. Your Relvato API key as a Bearer token, from API access (app.relvato.com/api-access). Leave it out to sign in with OAuth instead.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
What it can do
We have not read this server’s tool list yet; we check endpoints in rotation.
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026
- ✓ Pass
Maker matches the repo
The registry name was verified against the domain relvato.com (the registry checks domain ownership)
- … Not checked yet
Still maintained
We have not read this repo from GitHub yet
- … Not checked yet
Has a licence
We have not read this repo from GitHub yet
- … Not checked yet
Endpoint responds
Not checked yet; we check endpoints in rotation
- … Not checked yet
Sign-in with OAuth
Not checked yet; we check endpoints in rotation
- … Not checked yet
No hidden instructions in tool descriptions
Not checked yet; we read the tool list when we check the endpoint
Compared with others in Online shops & paymentsi
- More stars than 0% of the other 1743 servers in this category
- Published to the registry more recently than 70% of the other 1743 servers in this category
- Basic checks equal to or better than 100% of the other 1743 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is Relvato safe?
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
You need to fill in: Authorization
Does it run on my computer or in the cloud?
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
Is it still maintained?
The GitHub repo last changed –, and the latest version (3.5.1) reached the registry 13 days ago.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
What can I use instead?
In the same category: Spree Commerce: open-source B2B and marketplace ecommerce, Stripe MCP, MCP Cn Commerce
Alternatives
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Stripe MCP
Stripe’s official server lets AI view and manage customers, products, payments and invoices. Connect to Stripe’s cloud and sign in with OAuth.
MCP Cn Commerce
8 read-only MCP platform entries; support is operation-specific; merchant live acceptance pending
README from the maker
Open the README
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Relvato MCP server
Website monitoring your AI agent can run: add a site, set up and tune its monitors, run them, explain what broke and fix it with you.
Developer docs · Official MCP Registry · relvato.com
Relvato is a website monitoring platform. Its monitors cover uptime and SSL; user flows like sign-up, login, cart and checkout; security (vulnerable plugins, signs of a hack, changed files, new admins); Core Web Vitals and real-user speed; visual regressions and broken links; SEO and AI search, including your Google Search Console and Bing Webmaster Tools numbers; domain, DNS and email records; and legal compliance (cookie consent, accessibility). They run in a real browser on any website, go deepest on WordPress & WooCommerce, and run again every time the site changes.
This is Relvato's hosted Model Context Protocol server. There's nothing to install or run: point your MCP client at the URL and sign in to Relvato, or use a Relvato API key. This repository holds the connection details, the registry entry (server.json) and the Claude plugin (.claude-plugin/, skills/). The server itself runs at Relvato.
| Endpoint | https://app.relvato.com/api/mcp |
| Transport | Streamable HTTP (stateless JSON-RPC over POST) |
| Auth | Sign in (OAuth 2.1: PKCE, Client ID Metadata Documents, resource indicators), or an API key: Authorization: Bearer rlv_… |
| Registry name | com.relvato/relvato |
Sign in (no key needed)
Sign-in works in clients that identify themselves with a Client ID Metadata Document (CIMD): Claude (claude.ai, Desktop, and Claude Code 2.1.81 or later), ChatGPT and VS Code. Relvato doesn't offer dynamic client registration, so a client that can only register itself that way (Cursor for now, the Gemini CLI, Docker's MCP gateway), or that has no sign-in at all (DeepSeek Harness), uses an API key instead.
In a client that supports it, add the endpoint with nothing else. The first time the client uses it, it opens Relvato's sign-in:
- Sign up (there's a free plan) or sign in.
- Allow the client to read your sites and results and to make changes: add and configure sites and monitors, change schedules and run scans.
- If you belong to an organization, pick which of its workspaces to connect. Your personal workspace isn't offered there, so use an API key for it.
Discovery follows the MCP authorization spec. A 401 points to /.well-known/oauth-protected-resource/api/mcp, and the authorization server is https://clerk.relvato.com (client_id_metadata_document_supported; no registration endpoint). The scopes are relvato:read, relvato:write and user:org:read.
Or use an API key
For scripts, for clients that can't sign in (no CIMD support), or for your personal workspace while you're in an organization:
- Open API access from the account menu, or go to app.relvato.com/api-access.
- Create a key:
- Full access lets the agent add and configure sites and monitors, run them, review results and apply the fixes runs propose.
- Read-only lets it read everything: sites, health and uptime, performance, runs, monitors, WordPress updates and activity, fix briefs and alert settings. With a read-only key the client only sees the read tools.
- Send it as
Authorization: Bearer rlv_…(orx-api-key: rlv_…). A key is shown once. Keep it out of files you commit.
Connect
Claude (claude.ai, Desktop, mobile)
Settings → Connectors → Add custom connector. Enter the URL https://app.relvato.com/api/mcp, then Connect and sign in.
Claude Code
The plugin (recommended): the server plus six skills, three for any conversation about your sites and three for working from a code repo.
claude plugin marketplace add Relvato/relvato-mcp
claude plugin install relvato@relvato
Then run /mcp, choose plugin:relvato:relvato, then Authenticate. The skills:
| Skill | What it does | |
|---|---|---|
/relvato:site-health [site] | Reports how a site is doing across all its monitors (uptime, user flows, security, speed, SEO, design, domain, compliance) and what needs attention first. Reads results only. | |
| `/relvato:search-traffic [site] [google\ | bing]` | Explains the site's Google Search Console and Bing Webmaster Tools numbers against its usual: clicks, impressions, position, pages in the index, the pages and queries losing ground, crawl errors and sitemaps, plus SEO integrity and AI answer engines. |
/relvato:security-review [site] | Reviews the security monitors: vulnerable plugins, signs of a hack, changed files, new admins, exposed files and new scripts, in order of urgency, and what to do first. | |
/relvato:setup [url] | Adds the site this repo deploys, proves ownership (it can add the verification meta tag to your code), picks monitors for what matters and starts the first runs. | |
/relvato:check-after-deploy [site] [group] | Runs the site's monitors after a deploy, says how long they'll take, and reports what passed and what broke, with links. Only runs when you type it, since runs use your monthly quota. | |
/relvato:fix-failure [run] | Reads a failed run and its fix brief, finds the cause in the code (including what changed since it last passed), makes the smallest fix with your OK, then re-runs that monitor. |
Already added Relvato on claude.ai? With a Claude subscription, that connector shows up in Claude Code too. The skills work with either connection.
The plugin has no code of its own: it adds Relvato's hosted MCP server (https://app.relvato.com/api/mcp) and these skills, which are written instructions for Claude. Claude sends your requests to that server only, after you sign in to Relvato. Starting runs counts toward your plan's monthly runs, so the skills ask before they start any.
Just the server:
claude mcp add --transport http relvato https://app.relvato.com/api/mcp
Then run /mcp, choose relvato, then Authenticate. With an API key instead:
claude mcp add --transport http relvato https://app.relvato.com/api/mcp --header "Authorization: Bearer rlv_your_key"
Cursor
In ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project), with an API key. Cursor doesn't support Client ID Metadata Documents yet, so it can't use Relvato's sign-in:
{
"mcpServers": { "relvato": { "url": "https://app.relvato.com/api/mcp", "headers": { "Authorization": "Bearer rlv_your_key" } } } }
Once Cursor supports CIMD, the URL alone will be enough: Cursor will offer to sign in.
VS Code
In .vscode/mcp.json. VS Code offers to sign in:
{
"servers": { "relvato": { "type": "http", "url": "https://app.relvato.com/api/mcp" } } }
With an API key, VS Code can ask for it once and store it securely, so it never sits in the file:
{
"inputs": [ { "type": "promptString", "id": "relvato-key", "description": "Relvato API key (rlv_…)", "password": true } ], "servers": { "relvato": { "type": "http", "url": "https://app.relvato.com/api/mcp", "headers": { "Authorization": "Bearer ${input:relvato-key}" } } } }
Gemini CLI
Install the extension from its own repository, Relvato/relvato-gemini (it moved there in 3.5.2; if you installed it from this repository, run gemini extensions uninstall relvato first):
gemini extensions install https://github.com/Relvato/relvato-gemini
It asks for your Relvato API key (create one) and keeps it in your system keychain; it never sits in a file. To change it later: gemini extensions config relvato. The Gemini CLI can't use Relvato's sign-in (it supports only dynamic client registration, which Relvato doesn't offer), so the extension uses the key.
Without the extension, add the server to ~/.gemini/settings.json:
{
"mcpServers": { "relvato": { "httpUrl": "https://app.relvato.com/api/mcp", "headers": { "Authorization": "Bearer rlv_your_key" } } } }
DeepSeek Harness
Add the dsh-plugin-relvato bundle to a profile, with your API key in RELVATO_API_KEY (your environment or ~/.dsh/.env):
dsh plugin --profile web add dsh-plugin-relvato
It's on npm; github:Relvato/dsh-plugin-relvato installs it straight from GitHub.
dsh's MCP client sends headers and has no sign-in, so it uses the key. The tools appear as mcp__relvato__ .
Cline
In cline_mcp_settings.json (MCP Servers → Configure), with an API key:
{
"mcpServers": { "relvato": { "type": "streamableHttp", "url": "https://app.relvato.com/api/mcp", "headers": { "Authorization": "Bearer rlv_your_key" } } } }
Agents that set servers up themselves can follow llms-install.md.
Any other client
Add a remote HTTP (streamable HTTP) server with the endpoint above. If the client supports MCP sign-in with Client ID Metadata Documents (CIMD), that's all. Otherwise (including clients that only do dynamic client registration) add an Authorization: Bearer rlv_… header. In the common mcp.json format:
{
"mcpServers": { "relvato": { "type": "http", "url": "https://app.relvato.com/api/mcp", "headers": { "Authorization": "Bearer rlv_your_key" } } } }
Tools
58 tools, grouped by job in the order tools/list sends them. read tools work with any connection; full access tools need a full-access key, or a sign-in that allowed changes.
Set up
| Tool | What it does | Access needed |
|---|---|---|
list_sites | List the account's websites and whether each is ready to run monitors. | read |
add_site | Add a website and get its setup step: connect the WordPress plugin, or verify the domain. Until then it can run the public monitors by hand, 3 times a day (real runs on the live site). | full access |
verify_site | Check that setup step: the plugin connection, or the domain-verification DNS record or meta tag. | full access |
start_monitoring_for_goals | Pick what matters (checkout, security, search, speed, …) and get the monitors that cover it on your plan. | full access |
list_checks | The monitors you can add to a site: what each catches, whether your plan includes it, and which are recommended. Before ownership is proven: which can run now (started by hand), and what proof adds. | read |
add_checks | Add monitors to a site; each one reports added, already there, or why not. Their schedule starts once ownership is proven. | full access |
dismiss_recommendation | Stop recommending a monitor for a site, or bring dismissed recommendations back. | full access |
calibrate_site | WooCommerce: read the store again (a product to buy, checkout type, currency) after it changed. | full access |
verify_vitals_beacon | Check the real-user Web Vitals beacon is installed. | full access |
Read
| Tool | What it does | Access needed |
|---|
| site_overview | Plain-language health verdict: what needs attention, every monitor with its latest run and schedule, plan usage and, on WordPress, the
Only the beginning is shown; read the rest in the repo