MCP.Market

Is Shopbuddy MCP server safe?

Yes, with the usual care.

B84/100grade B

Safe to use. Minor gaps such as a missing repository or slower maintenance.

What to know before installing
  • highShell command built from a string (injection risk)

How Shopbuddy compares

Against every graded E-commerce MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
84/100
higher than 78% of 2,174 E-commerce servers
Uptime
100%
of our recent checks; the typical remote E-commerce server answers 100%

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high
  • Code scan2 source files scanned13/25
  • Live reliabilityremote reachable in 156ms (auth required)20/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityOAuth resource metadata advertised on 40115/15
  • Maintenancelast push 25 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/index.js: …== "win32" ? 'start ""' : "xdg-open"; exec(`${cmd} "${url}"`, () => { }); } async function d…
Overall 84/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Shopbuddy does

Shopbuddy reviews, tools and install