Shopbuddy MCP server
online · 100% uptimeio.github.tmill313/shopbuddy·v0.3.1Safe Shopify theme changes for AI agents: staging, validation, visual review, approval, rollback.
0 stars26 downloads/wk
Reviews
Write oneNobody has reviewed Shopbuddy yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Shopbuddy tools
Tool list not cached yet. `describe` through the gateway fetches it live.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned13/25
- Live reliabilityremote reachable in 156ms (auth required)20/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualityOAuth resource metadata advertised on 40115/15
- Maintenancelast push 25 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- highShell command built from a string (injection risk)
exec.shell-concatdist/index.js: …== "win32" ? 'start ""' : "xdg-open"; exec(`${cmd} "${url}"`, () => { }); } async function d…
How Shopbuddy compares
Against every graded E-commerce MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 84/100
- higher than 78% of 2,174 E-commerce servers
- Uptime
- 100%
- of our recent checks; the typical remote E-commerce server answers 100%
- Response time
- 387 ms
- faster than 41% of 1,527 E-commerce servers
- Downloads a week
- 26
- more than 15% of 411 E-commerce servers with a package
Install Shopbuddy in Claude Code, Cursor or VS Code
claude mcp add --transport http shopbuddy https://getshopbuddy.vercel.app/api/mcp
What the publisher says
From the Shopbuddy repository's README, as published. We do not edit it. Read it on GitHub
Shop Buddy
Let your AI coding agent change your Shopify theme safely. Every edit lands on an unpublished staging theme. Shop Buddy validates it with Theme Check, screenshots before/after on mobile and desktop with a plain-language summary of what changed, and you approve with one tap. Rollback is one tap. The live theme is never edited directly.
Site and one-click install: https://getshopbuddy.vercel.app/install
# Claude Code (hosted MCP, signs in through your browser)
claude mcp add --transport http shopbuddy https://getshopbuddy.vercel.app/api/mcp
# Claude Code plugin (adds the skill too)
claude plugin marketplace add tmill313/shopbuddy-plugin
claude plugin install shopbuddy@shopbuddy-marketplace
# Codex
codex mcp add shopbuddy --url https://getshopbuddy.vercel.app/api/mcp
# Local CLI (no account needed for local mode)
npx shopbuddyClaude (web/desktop) and ChatGPT: add a custom connector with https://getshopbuddy.vercel.app/api/mcp. The agent opens a browser tab; sign in or create an account there and click Allow. No keys.
How it works
- shopbuddystartchange duplicates the live theme into a staging theme and pulls it into a server-side working copy.
- The agent reads, searches and writes files, runs Theme Check with shopbuddyvalidate, then shopbuddypush_preview uploads to staging and captures before/after screenshots, each visual change attributed to its section.
- shopbuddysubmit and shopbuddyrequestpublish hand the store owner a one-tap approval link. Owners can opt a store into trusted publishing so low-risk changes publish on request, always logged and one tap from shopbuddyrollback.
Agent-readable summary: https://getshopbuddy.vercel.app/llms.txt
What is in this repo
This is the public companion to the hosted service: the Claude Code plugin and marketplace manifests, the shopbuddy skill, the MCP client config, and the MCP Registry manifest (io.github.tmill313/shopbuddy). The platform itself is a hosted service; the CLI ships compiled on npm as shopbuddy.
Privacy and terms
https://getshopbuddy.vercel.app/privacy · https://getshopbuddy.vercel.app/terms
Shop Buddy is an independent service, not affiliated with or endorsed by Shopify.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-09-27restoreD → Bscore 84: Shell command built from a string (injection risk)
Shopbuddy: common questions
- Is Shopbuddy MCP server safe?
- Mostly: it is graded B (84/100). Read the Shopbuddy safety report
- How do I install Shopbuddy?
- It runs remotely at getshopbuddy.vercel.app. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Shopbuddy need an API key?
- No key to paste: it signs you in with OAuth when your client connects.
- Is Shopbuddy maintained?
- The last commit was 63 days ago (2026-09-02). The latest release is v0.3.1.
- Is Shopbuddy up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Shopbuddy?
- Servers from other publishers that do the same job: HasData Walmart MCP server, Apiguru Amazon Data MCP server and Markifact - Ads & Analytics MCP server.
- How does Shopbuddy compare with other E-commerce MCP servers?
- safety score 84/100 (higher than 78% of 2,174 E-commerce servers); uptime 100% (of our recent checks; the typical remote E-commerce server answers 100%); response time 387 ms (faster than 41% of 1,527 E-commerce servers). Full comparison.
Alternatives to Shopbuddy
Same job from other publishers: the closest match first, then the best rated.
HasData WalmartWalmart search, product pages and customer reviews on walmart.com and walmart.ca, as JSON.not reviewedGrowingA
Apiguru Amazon DataLive Amazon product, review, search, deal, offer/stock and seller data across 23 marketplaces.not reviewedGrowingA
Markifact - Ads & AnalyticsAI marketing agent for Google Ads, Meta, GA4, TikTok, LinkedIn, Shopify, HubSpot and more.not reviewedGrowingA- AppstoreconnectApp Store Connect for MCP clients: PPP pricing, subscriptions, TestFlight, reviews, reports & morenot reviewedGrowingA
- AsoBeastApp Store and Google Play ASO: keyword rankings, competitors, reviews, audits and an action queue.not reviewedGrowingA
