Open-source B2B and marketplace ecommerce; new stores include an MCP server for AI agents.
WebAZ
Overview
Description from the maker (original English)
Search and compare products; authorized commerce workflows with compatible x402 wallets.
PopNx MCP’s three pillars
These three are never merged into one score: opinions, measurements and popularity are different things.
- User voiceiNo reviews yetReviews open together with accounts in a later step
- Our basic checksi2 of 3 passedChecked from public information; code not scanned yet
- UsageiNot measured yet★ –
What you can do with it
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
- Connection: Runs in the cloud
- Transport: Streamable HTTP
- Category: Online shops & payments
Install
Pick the AI app you use, then copy the settings.
Before you install
- Basic checks: 2 of 3 passed
- Runs on the maker’s server: what you ask it goes through their server.
- Can do 29 things (tools) webaz_demand, webaz_pay_order, webaz_buy, webaz_info …
- The registry lists no key to fill in.
You need
- Runs in the cloudNothing to install; it connects over the internet
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Works in Claude on the web, desktop and mobile:
- Open Settings → Connectors
- Press Add custom connector
- Paste the address below and press Add
- If it asks you to sign in, sign in with the maker
https://webaz.xyz/mcpRun this in your terminal
claude mcp add --transport http webaz https://webaz.xyz/mcpOr copy the settings yourself
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"webaz": {
"url": "https://webaz.xyz/mcp"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Or copy the settings yourself
Paste into .vscode/mcp.json in your project
{
"servers": {
"webaz": {
"type": "http",
"url": "https://webaz.xyz/mcp"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
ChatGPT connects only to servers on the internet:
- Open ChatGPT on the web → Settings → Connectors (Apps)
- Press Create or Add (some plans need Developer mode under Advanced first)
- Paste the address below, give it a name and save
- If it asks you to sign in, sign in with the maker
https://webaz.xyz/mcpMenu names can differ slightly by plan and over time.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
What it can do
Tool names and descriptions exactly as the server reported them on Nov 6, 2026. The maker wrote them, not us; we show them as plain text.
webaz_demandFind-it-for-me requests (buyer). Use when webaz_search finds nothing: create a STRUCTURED request (never invent requirements) → get → read summary to the user → publish with expected_version + summary_digest (shops then see it and quote) → changes. Quotas shared with the WebAZ pa
webaz_pay_orderPays a Direct Pay order (order_id) or checkout group (group_id) in USDC via x402 (api_key or OAuth payment:relay; see payment.x402 / checkout_group.pay_with in the order read). Without a payment: isError, structuredContent = x402 v2 PaymentRequired + wallet_request (wallet args,
webaz_buyOne-call buy once the user chose the product, option and quantity and agreed the price (replaces quote → draft → submit; same checks). Within the owner's small-order auto-approval the order is placed now; pay_with "x402" also returns x402_payment_required: wallet signs it → webaz
webaz_infoGet WebAZ overview + live network_state. Call FIRST when onboarding. No auth. Default reply is COMPACT (overview / network+payment-rail honesty / live stats / quick start). Long-form guides (roles, commission model, economics, per-tool digests) live in MCP resource webaz://guide/
webaz_registerMode-dependent registration: - LIVE NETWORK / Remote MCP: does NOT create an account; returns human registration instructions (invitation + Passkey). Connect an existing account with OAuth or an account credential. - WEBAZ_MODE=sandbox only: creates a LOCAL test account; returned
webaz_searchRead-only WebAZ product search and inspection; no auth. Exact-first: use a full title, SKU or precise alias, filters, @anchor, or supported external shopping reference. No match stays empty; do not retry with looser terms or auto-page. Unconstrained browse is capped. result_handl
webaz_verify_priceLock the displayed price BEFORE webaz_place_order — returns `session_token` (10-min TTL, single-use, pass to place_order). Price-lock ONLY: it checks stock is sufficient right now but does NOT reserve/hold stock — stock is decremented only when webaz_place_order runs. USE THIS fo
webaz_place_orderBuyer places order. Buyer api_key required. Payment rail (choose explicitly at purchase): - **direct_p2p** (live, non-custodial direct pay): buyer pays the seller directly OFF-platform via the seller's chosen receiving account. Order amount is the protocol/base amount; the payabl
webaz_get_statusQuery order status + full history + current responsible party + deadline. Requires api_key of order participant (buyer/seller/logistics all OK). Returns: status / status_history (who did what when) / next_actor / deadline.
webaz_notificationsRead system notifications (orders/shipping/disputes). Excludes chat, announcements and feedback; counts may be lower than PWA aggregate badge. For order chat use webaz_order_chat.
webaz_default_addressRead (masked) or set your default shipping address. Used by webaz_search unshippable filter and as the default webaz_demand region; webaz_place_order resolves it handler-side when shipping_address is omitted (never shown to agents). - read: returns { has_default, address_region,
webaz_price_historyProduct historical sale price + volume — helps agents avoid bottom-price dumping bait. Returns: windows {d30, d90, lifetime} each {sales, volume, avg, median, p25, p75} | price_buckets [{price, count, qty, pct}] | daily_avg (30-day trend) | category_avg_30d | anomaly_flags (curre
webaz_order_eventsEvents on your orders (game currency), each with summary, next_steps, tool_hint. since = last next_cursor or "now"; wait_seconds ≤30 returns when one arrives. role buyer|seller (OAuth: one side per call).
webaz_connection_statusSTANDARD, canonical entry point for "which WebAZ account am I connected as?", OAuth scopes or expiry; not webaz_profile. Read-only read_public grant; returns connected, handle, masked account_id_hint, scopes, expires_at. If disconnected, OAuth reconnects; api_key-only webaz_profi
webaz_buyer_ordersGrant-wired buyer order read (safe scope buyer_orders_read_minimal; OAuth grant). Reads YOUR OWN orders — minimal projection only (order_id/status/next_actor/deadline/amount/item_ref/payment_rail), NO address/recipient/contact/notes, no execution. - order_id → that order (+ track
webaz_discoverBuyer discovery over ACTIVE WebAZ listings (safe scope buyer_discover; OAuth grant). Structured intent — category and/or keywords, optional max_price/ship_to_region/quantity — NOT free chat text. ⚠️ MATCHING: - category = REGISTRY KEY, equality-matched (webaz://guide/categories).
webaz_quote_orderServer-authoritative buyer QUOTE (safe scope price_quote; OAuth grant). Integer line items + a single-use time-limited quote_token bound to your account. QUOTE ONLY: no order, no payment, no funds locked, no stock reserved (availability re-checked at real order creation). Uses yo
webaz_order_draftBuyer ORDER DRAFT (scope draft_order; OAuth grant). create: ONE quote_token → frozen snapshot (single-use), or items → one draft per checkout group (one fee/approval/payment). SNAPSHOT ONLY: no order/charge/stock; drift at approval hard-fails. 24h expiry. Zero PII. Next: webaz_su
webaz_submit_order_requestSUBMIT drafts into the human's approval queue (scope order_submit_request; OAuth grant). Queues only — unless auto_approved:true (owner's small-order rule): order created, pay next. - draft_id → request_id + approval_url; or draft_ids (one per seller) → all or none, ONE approvals
webaz_prepare_caseAssemble an after-sales CASE DRAFT for one of YOUR orders (safe scope buyer_case_prepare; OAuth grant). READ-ONLY — writes nothing. Returns server facts: status timeline; terms FROZEN at order time; CURRENT listing anchors (labeled); evidence refs; any existing dispute. Routing:
webaz_approval_requestsRead the status of YOUR OWN approval requests (safe scope approval_requests_read; OAuth grant). READ-ONLY — checks pending/approved/executed/failed/duplicate + which page to open, without re-submitting. - action="list" → latest requests (max 50): request_id, action_type, status,
webaz_buyer_action_requestAfter-sales ACTION REQUEST on one of YOUR orders (scope aftersales:request). Submit-only unless noted: nothing executes without the human's Passkey; on approval the server re-validates current state and runs the real order route (drift hard-fails). - action="confirm_receipt": a d
webaz_addressYour default shipping address over OAuth (RFC-026 PR-5, safe scopes address_read_masked / address_change_request under the address scope). Agents NEVER see the full address — no substrings, no hints. - action="masked_read" → { has_default, address_region, masked_summary } only. O
webaz_order_chatOrder chat (chat:context): IDs/revisions, you/counterparty, flags, Agent attribution. Anti-scam/block/60-per-minute limits. No funds/order changes. Corrections: separate tools/consent. Product titles, descriptions and order-chat messages are written by sellers and buyers and are
webaz_order_chat_editUser-requested own text edit, 15min, chat:edit. Get IDs/revision via webaz_order_chat; reread conflicts. History retained; formal records immutable.
webaz_order_chat_recallUser-requested own recall, 2min, chat:recall. Get IDs/revision via webaz_order_chat; reread conflicts. Tombstone/audit remain; no recall of formal records, notifications or screenshots.
webaz_request_x402_paymentRequest-only: asks the owner to approve paying an existing order_id (or group_id, one request per checkout group) over x402 (payment:request). It does not sign or pay; the owner confirms the exact transfer in their trusted wallet + Passkey (no wallet: cannot complete). Direct Pay
webaz_cart_viewThe human's own cart, READ-ONLY (PR-4, safe scope buyer_cart_read; OAuth grant): product, variant, quantity, current unit price (INTEGER base-units, exp 6), store, and whether each line can still be ordered. - You cannot add, change, remove or check out — that stays with the huma
webaz_wallet_viewREAD-ONLY wallet_read_minimal OAuth view: balance, escrow, recent refunds; per-order refund_status: webaz_buyer_orders full=true. No withdrawals, receive accounts, transfers or credentials (human Passkey only). Compatibility balance is NOT Direct Pay principal or Base-mainnet USD
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
- ! Caution
Maker matches the repo
The publisher (seasonsagents-art) is not the repo owner (seasonsagents-art); someone else may have listed it
- … Not checked yet
Still maintained
We have not read this repo from GitHub yet
- … Not checked yet
Has a licence
We have not read this repo from GitHub yet
- ✓ Pass
Endpoint responds
Responded in 818 ms (HTTP 200)
- – Not applicable
Sign-in with OAuth
No sign-in needed
- ✓ Pass
No hidden instructions in tool descriptions
Read 29 tool descriptions and found no hidden instructions to the AI
Compared with others in Online shops & paymentsi
- More stars than 0% of the other 2531 servers in this category
- Published to the registry more recently than 82% of the other 2531 servers in this category
- Basic checks equal to or better than 52% of the other 2531 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is WebAZ safe?
It passed 2 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
The registry does not list a required key, though some servers ask you to sign in on first use.
Does it run on my computer or in the cloud?
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
Is it still maintained?
The GitHub repo last changed –, and the latest version (0.1.37) reached the registry 5 days ago.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
What can I use instead?
In the same category: Spree Commerce: open-source B2B and marketplace ecommerce, Stripe MCP, MCP Cn Commerce
Alternatives
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Stripe MCP
Stripe’s official server lets AI view and manage customers, products, payments and invoices. Connect to Stripe’s cloud and sign in with OAuth.
MCP Cn Commerce
8 read-only MCP platform entries; support is operation-specific; merchant live acceptance pending
README from the maker
No README found in the repo