Storefront Guard MCP server

by maxigirl123·io.github.maxigirl123/storefront-guard·v0.3.2

Verifies a merchant storefront is legitimate before an AI agent commits payment.

B83/100grade B

What users say

No reviews yet

Safety scan

B83/100

Adoption

Growing

0 stars28 downloads/wk

Reviews

Nobody has reviewed Storefront Guard yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings

Code scan22 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 2 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y storefront-guard-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add storefront-guard -- npx -y storefront-guard-mcp-server

Is Storefront Guard MCP server safe?: Mostly: it is graded B (83/100). Read the Storefront Guard safety report
How do I install Storefront Guard?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Storefront Guard need an API key?: Yes. The registry entry asks for GOOGLE_SAFE_BROWSING_API_KEY, SAM_GOV_API_KEY, URLHAUS_AUTH_KEY.
Is Storefront Guard maintained?: The last commit was 2 days ago (2026-09-18). The latest release is v0.3.2.
What can I use instead of Storefront Guard?: Servers from other publishers that do the same job: X402 List MCP server, payware MCP server and AurasPay Merchant MCP server. Compare all Storefront Guard alternatives.

Same job from other publishers: the closest match first, then the best rated.

X402 List
Find and vet x402 payment APIs before your agent pays one: uptime, price, on-chain volume.
not reviewed
Established
A
payware
payware A2A payments API for merchants, ISVs and payment institutions
not reviewed
Growing
B
AurasPay Merchant MCP
Review AurasPay merchant payments and prepare payment links with scoped OAuth and human approval.
not reviewed
Growing
A
gate402 merchant checkout
Drop-in x402 checkout for merchants: issue terms, verify payment. $0.01 each.
not reviewed
Growing
A
Anyway Possible Paid Agent Utilities
Paid x402 tools for merchant intelligence, Base payment readiness, and verifiable web evidence.
not reviewed
Growing
A

Local package. It runs on your machine, not through the gateway.

GOOGLE_SAFE_BROWSING_API_KEYsecretGoogle Safe Browsing API key for scam domain checks. Optional — degrades gracefully if not set.
SAM_GOV_API_KEYsecretSAM.gov API key for US federal exclusions check. Optional — skipped if not set.
URLHAUS_AUTH_KEYsecretURLhaus Auth-Key for malware URL lookups. Optional — degrades gracefully if not set.

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/maxigirl123-storefront-guard.svg)](https://mcp.market/server/maxigirl123-storefront-guard)