Open-source B2B and marketplace ecommerce; new stores include an MCP server for AI agents.
Store Canary
概览
作者提供的说明(英文原文)
Free read-only WooCommerce checks: store, SSL, exposure, SEO, speed, products, policies + 3 prompts
PopNx MCP 的三大支柱
这三项永远不会合并成一个分数:意见、测量和人气是不同的东西。
- 用户评价i暂无评价评价功能将在后续阶段与账户功能一起开放
- 我们的基础检查i3 项中通过 3 项依据公开信息检查;尚未扫描代码
- 使用情况i尚未统计★ –
它能帮你做什么
我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。
- 连接方式: 在云端运行
- 传输方式: Streamable HTTP
- 分类: 网店与支付
安装
选择你使用的 AI 应用,然后复制设置。
安装之前
- 基础检查:3 项中通过 3 项
- 在作者的服务器上运行:你向它提出的内容会经过他们的服务器。
- 可以做 8 件事(工具) check_store, check_ssl, check_exposure, check_seo_basics …
- 注册中心没有列出需要填写的密钥。
你需要
- 在云端运行无需安装任何东西,通过互联网连接
你用的是哪个应用?
在上方选择你的应用。我们会记住它,下次按钮会显示“安装到 …”。
适用于网页版、桌面版和手机版 Claude:
- 打开 Settings → Connectors
- 点击 Add custom connector
- 粘贴下面的地址,然后点击 Add
- 如果要求登录,请登录作者的服务
https://mcp.storecanary.app/mcp在终端中运行这条命令
claude mcp add --transport http store-canary https://mcp.storecanary.app/mcp或者自己复制设置
粘贴到项目中的 .cursor/mcp.json,或 ~/.cursor/mcp.json
{
"mcpServers": {
"store-canary": {
"url": "https://mcp.storecanary.app/mcp"
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
或者自己复制设置
粘贴到项目中的 .vscode/mcp.json
{
"servers": {
"store-canary": {
"type": "http",
"url": "https://mcp.storecanary.app/mcp"
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
ChatGPT 只能连接互联网上的服务器:
- 打开网页版 ChatGPT → Settings → Connectors (Apps)
- 点击 Create 或 Add(部分套餐需要先在 Advanced 中开启 Developer mode)
- 粘贴下面的地址,起个名字,然后保存
- 如果要求登录,请登录作者的服务
https://mcp.storecanary.app/mcp菜单名称可能因套餐和版本不同而略有差异。
你的选择通过 Cookie 保存在这台设备上,无需账户。
这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同,请以 README 为准。
它能做什么
工具名称和描述与服务器在 2026年11月6日 报告的完全一致。这些内容由作者撰写,不是我们写的;我们以纯文本形式显示。
check_storeCheck a public WooCommerce store from the outside: is it reachable, is HTTPS valid and are redirects sane, is WooCommerce detected, do /cart/ and /checkout/ load, and are payment markers visible on checkout. Read-only: GET requests only, never adds to cart, logs in or submits for
check_sslCheck that a store's HTTPS certificate is accepted, http:// permanently redirects to https://, the redirect chain is short and stays on HTTPS, and an HSTS header is set. The exact certificate expiry date isn't visible to an outside fetch. Read-only: one run of GET requests only;
check_exposureFlag WordPress, WooCommerce, plugin and PHP versions a store shows publicly (generator tags, asset ?ver= values, X-Powered-By), a public /readme.html and a readable /wp-content/debug.log. Log contents are never returned or kept. Read-only: one run of GET requests only; never logs
check_seo_basicsCheck a store's robots.txt (and whether it blocks the whole site), its XML sitemap, the homepage title and meta description, and noindex on the homepage. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing
check_speedTime one download each of a store's homepage, one product page and the cart from Cloudflare's network. One sample per page, not a lab test or an average. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing
check_productsRead up to 10 published products from the public WooCommerce Store API and flag missing prices, missing images and out-of-stock items. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Ca
check_policiesCheck that the homepage links to privacy, terms, shipping and returns/refunds pages, and that each linked page on the same site loads. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Ca
explain_findingExplain a finding code returned by any Store Canary tool (for example ssl_hsts or exposure_debug_log) in plain words, with a suggested fix. Makes no network requests.
基础检查i
我们检查的是任何人都能看到的信息;我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月7日
- ✓ 通过
作者与仓库一致
注册名称已通过 GitHub 账户 erikras 验证,该账户拥有此仓库
- … 尚未检查
仍在维护
我们还没有从 GitHub 读取这个仓库
- … 尚未检查
有许可证
我们还没有从 GitHub 读取这个仓库
- ✓ 通过
端点有响应
在 95 毫秒内响应(HTTP 200)
- – 不适用
使用 OAuth 登录
无需登录
- ✓ 通过
工具描述中没有隐藏指令
已读取 8 个工具描述,未发现针对 AI 的隐藏指令
与“网店与支付”中的其他服务器比较i
- 星标数多于此分类中其他 1754 个服务器的 0%
- 发布到注册中心的时间比此分类中其他 1754 个服务器的 78% 更新
- 基础检查结果等于或优于此分类中其他 1754 个服务器的 100%
与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时,星标数才计入。
常见问题
Store Canary 安全吗?
它在 3 项适用的基础检查中通过了 3 项。我们没有阅读代码。在添加密钥或令牌之前,请先看看这个服务器要求哪些权限,并使用只具备所需权限的密钥。
它需要哪些密钥或代码?
注册中心没有列出必需的密钥,不过有些服务器会在首次使用时要求你登录。
它在我的电脑上运行还是在云端?
它在作者的云端运行。通过互联网连接,无需安装,但你发送的内容会经过作者的服务器。
它还在维护吗?
GitHub 仓库最后更新于–,最新版本(1.1.0)于8天前进入注册中心。
哪些应用可以使用它?
支持 MCP 的应用,例如 Claude Desktop、Claude Code、Cursor 和 VS Code。它通过 URL 连接,所以接受远程 MCP 服务器的应用也可以使用,例如开启开发者模式的 ChatGPT。
有什么可以替代它?
同一分类中有:Spree Commerce: open-source B2B and marketplace ecommerce, Stripe MCP, MCP Cn Commerce
替代选择
同一分类中其他作者的服务器,按星标数排序。
如何看卡片:★ GitHub 星标i三大支柱:评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i
Stripe MCP
MCP server integrating with Stripe - tools for customers, products, payments, and more.
MCP Cn Commerce
8 read-only MCP platform entries; support is operation-specific; merchant live acceptance pending
作者的 README
打开 README
按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。
Store Canary MCP connector
A free, hosted, read-only MCP server that checks a public WooCommerce store from the outside and answers in plain pass / warn / fail lines. No account, no API key, no install.
Connector address: https://mcp.storecanary.app/mcp (Streamable HTTP, no authentication)
Docs: https://storecanary.app/mcp
This repository only documents the hosted connector. It contains no server code.
Tools (all read-only)
| Tool | What it checks |
|---|---|
check_store | Overall health: homepage reachable, HTTPS valid and redirects sane, WooCommerce detected, /cart/ and /checkout/ load, payment markers visible on checkout. |
check_ssl | Certificate accepted, http:// permanently redirects to https://, short HTTPS-only redirect chain, HSTS header set. |
check_exposure | WordPress, WooCommerce, plugin and PHP versions shown publicly, a public /readme.html, a readable /wp-content/debug.log (log contents are never returned or kept). |
check_seo_basics | robots.txt (and whether it blocks the whole site), the XML sitemap, homepage title and meta description, homepage noindex. |
check_speed | Times one download each of the homepage, one product page and the cart (one sample per page, not a lab test). |
check_products | Samples up to 10 published products from the public WooCommerce Store API for missing prices, missing images and out-of-stock items. |
check_policies | Homepage links to privacy, terms, shipping and returns/refunds pages, and each linked page loads. |
explain_finding | Explains any finding code (e.g. ssl_hsts, exposure_debug_log) in plain words, with a suggested fix. Makes no network requests. |
Every tool takes a store url (except explain_finding, which takes a code). Checks use GET requests only: they never log in, add to cart or submit forms. Each runs once, when you ask; nothing is monitored or scheduled.
Starter prompts
black_friday_audit— *Audit my WooCommerce store before Black Friday.* Runs all seven checks and turns them into a prioritized pre-sale fix list.checkout_check— *Is my checkout working?* Checks that the cart, checkout and payment methods load, and explains anything that doesn't.explain_finding— *Explain this finding.* Explains a Store Canary finding id with a suggested fix.
Setup
ChatGPT
Until Store Canary is in ChatGPT's app directory, enable developer mode and add a custom connector with the URL https://mcp.storecanary.app/mcp/chatgpt and no authentication.
Claude
Open Settings → Connectors → Add custom connector and paste https://mcp.storecanary.app/mcp.
Cursor
Add to your mcp.json:
{
"mcpServers": { "store-canary": { "url": "https://mcp.storecanary.app/mcp" } } }
Cline and other MCP clients
Add a remote server over Streamable HTTP at https://mcp.storecanary.app/mcp. No auth headers are needed. For clients that only speak stdio:
{
"mcpServers": { "store-canary": { "command": "npx", "args": ["-y", "mcp-remote", "https://mcp.storecanary.app/mcp"] } } }
Then ask: *"Check my store at example.com with Store Canary."*
Limits and safety
- Up to 10 checks a minute per connection, plus a shared cap.
- About five GET requests per check, no cookies, done in under 10 seconds. Requests identify as
StoreCanaryBot. - Public web addresses only: no IP addresses, private networks or unusual ports.
Privacy
Store Canary does not store the store URLs you check, their results, or your IP address. See the privacy policy.
Support
Email support@storecanary.app or visit https://storecanary.app/mcp.
Built by Form Nerd, LLC. Licensed under MIT.