MCP.Market

Sample Shop MCP server

online · 100% uptime
by apitoagents·io.github.apitoagents/sample-shop-mcp·v1.0.1

Sample shop MCP server: paginated search, idempotent orders, guarded cancellation. Four languages.

B84/100grade B
What users say
No reviews yet
Be the first
Safety scan
B84/100

full report

Adoption
Growing

0 stars437 downloads/wk

Reviews

Write one

Nobody has reviewed Sample Shop MCP server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Sample Shop MCP server tools (4, 2 write)

write = sends, deletes, buys or posts
  • cancel_orderwrite actionFree

    Cancel an order that has not shipped. This cannot be undone. Call it first with confirm=false to get the order details, show them to the user, and only after the user explicitly agrees call again with confirm=true.

  • create_orderwrite actionFree

    Place an order for one product. Generate one random idempotencyKey per user request and reuse the same key if you retry after an error or timeout; the shop returns the original order instead of creating a duplicate. Confirm product and quantity with the user before calling. Returns the order with its id, status and total.

  • get_productFree

    Return the full details of one product by its id (for example p-1001). Use search_products first if you only know a name.

  • search_productsFree

    Search the shop catalogue by phrase and optional category. Returns one page of up to `limit` products and a `nextCursor`; when nextCursor is not null, more results exist and you must say so rather than claiming the list is complete. Use get_product for full details of one item. This tool does not place orders.

Public scan report

scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it

1 high
  • Code scan7 source files scanned25/25
  • Live reliabilityremote reachable in 874ms20/20
  • Tool poisoning4 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 84/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Sample Shop MCP server compares

Against every graded E-commerce MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
84/100
higher than 78% of 2,026 E-commerce servers
Tools
4
the typical E-commerce server has 7
Tools that change things
50%
typical: 3%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote E-commerce server answers 100%
Response time
479 ms
faster than 44% of 1,406 E-commerce servers
Downloads a week
437
more than 90% of 379 E-commerce servers with a package

What its tools let an agent do: 2 read · 1 create · 1 delete

Install Sample Shop MCP server in Claude Code, Cursor or VS Code

claude mcp add --transport http sample-shop-mcp https://demo.apitoagents.com/mcp
Add to Cursor

What the publisher says

From the Sample Shop MCP server repository's README, as published. We do not edit it. Read it on GitHub

MCP server examples: one API, four languages, one tool interface

Ready-to-clone examples that expose a REST API to ChatGPT, Claude and any other MCP client, written with the official Model Context Protocol SDKs for TypeScript, Python, C# and PHP. All four servers wrap the same small Sample Shop API and publish an identical set of four tools, and a conformance test proves it by running the same scenario against each of them in CI.

Maintained by API to Agents, which builds and hosts this kind of server for companies that would rather not. The examples are MIT licensed; use them as a starting point for your own API.

What the examples show

Every integration needs the same three kinds of tool, and every example here has them:

Also shown in each: the upstream API key lives in the server's environment and is never visible to the assistant; errors distinguish invalid input, not found, conflict and upstream unavailable, each with a hint about what to do next; tools carry readOnlyHint, destructiveHint and idempotentHint annotations.

Layout

sample-api/   Zero-dependency Node server + openapi.json. Products, orders, idempotent create, cancel.
typescript/   @modelcontextprotocol/server 2.3 + express, Streamable HTTP, stateless
python/       mcp 2.3 (MCPServer), Streamable HTTP, stateless
csharp/       ModelContextProtocol.AspNetCore 2.2, .NET 10, Streamable HTTP, stateless
php/          mcp/sdk 0.8, PHP 8.2+, Streamable HTTP with a file session store
tests/        Conformance scenario (TypeScript client) run against each server in CI

Run it

Start the sample API once; it listens on 127.0.0.1:4010 and expects X-API-Key: demo-key.

node sample-api/server.mjs

Then start any server. Each reads UPSTREAMURL (default http://127.0.0.1:4010) and UPSTREAMAPI_KEY (default demo-key) from the environment.

# TypeScript — http://127.0.0.1:3001/mcp
cd typescript && npm ci && npm run build && npm start

# Python — http://127.0.0.1:3002/mcp
cd python && python -m venv .venv && .venv/bin/pip install -r requirements.txt && .venv/bin/python server.py

# C# — http://127.0.0.1:3003/mcp
cd csharp && dotnet run

# PHP — http://127.0.0.1:3004/mcp
cd php && composer install && php -S 127.0.0.1:3004 public/index.php

Run the conformance scenario against whichever one is up:

cd tests && npm ci && MCP_URL=http://127.0.0.1:3001/mcp npm test

Connect an assistant

Each server is a remote MCP server over Streamable HTTP at /mcp. For a client on another machine, expose it over HTTPS and point the client at that URL:

  • Claude (web, desktop, Claude Code): add it as a custom connector or MCP server by URL.
  • ChatGPT: add it through the connector settings available on your plan.
  • Any MCP client: use the Streamable HTTP transport with the server URL.

These examples use an API key on the upstream side only and no authentication on the MCP endpoint itself, which is fine on localhost and wrong on the internet. Before exposing one publicly, add bearer-token or OAuth protection at the endpoint; each SDK documents how.

Adapting to your own API

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Sample Shop MCP server: common questions

Is Sample Shop MCP server safe?
Mostly: it is graded B (84/100). Read the Sample Shop MCP server safety report
How do I install Sample Shop MCP server?
It runs remotely at demo.apitoagents.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Sample Shop MCP server need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Sample Shop MCP server maintained?
The last commit was 18 days ago (2026-10-07). The latest release is v1.0.1.
Is Sample Shop MCP server up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Sample Shop MCP server?
Servers from other publishers that do the same job: Shopware MCP server, Omie MCP server and Polymarket Toolkit MCP server.
How does Sample Shop MCP server compare with other E-commerce MCP servers?
safety score 84/100 (higher than 78% of 2,026 E-commerce servers); tools 4 (the typical E-commerce server has 7); tools that change things 50% (typical: 3%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Sample Shop MCP server

Same job from other publishers: the closest match first, then the best rated.

  • Shopware
    Query and safely manage a Shopware 6 shop: products, orders, customers, stock, audits, reports.
    B
  • Omie
    MCP server for Omie — ERP, customers, products, orders, invoices, financials
    B
  • Polymarket Toolkit
    Read-only Polymarket data tools for AI agents: profiles, PnL, market scans. No keys, no orders.
    B
  • Sv Number
    Phone numbers for AI agents: order a private number, read the SMS verification code, hand it back.
    B
  • WebCake Storefront
    Build pages and manage products, orders, and content on the WebCake/StoreCake storefront builder.
    A