CategoryWeightCategory scoreContribution
Securityprompt, exec, net, exfil, eval
35%
35.0 pts
Supply chainhash, typosquat, maintainer, lockfile
20%
20.0 pts
Maintenancestaleness, pinning, CI
15%
15.0 pts
TransparencySKILL.md, perms, README
15%
15.0 pts
Communityinstalls, verify, response
15%
15.0 pts
Findings & checks · 0 flagged
Security
✓—All security checks passedNo findings in this category for the latest scan.pass
Supply chain
✓—All supply chain checks passedNo findings in this category for the latest scan.pass
Maintenance
✓—All maintenance checks passedNo findings in this category for the latest scan.pass
Transparency
✓—All transparency checks passedNo findings in this category for the latest scan.pass
Community
✓—All community checks passedNo findings in this category for the latest scan.pass
Every scanned point with the score it earned and what moved between them.
75b2b4d
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
@semore/mcp-commerce
Reference Model Context Protocol (MCP) server for K-product cross-border commerce — five canonical tools that every agent-ready storefront should expose.
| # | Tool | Purpose |
|---|---|---|
| 1 | search_product | Keyword / category / price / locale search across the K-product catalog |
| 2 | get_product | Fetch a single SKU's full detail (i18n title/description, HS code, ship-from, lead time) |
| 3 | create_cart | Build cart with destination — returns itemized quote (subtotal + shipping + duty + import tax) |
| 4 | quote_checkout | Re-quote cart immediately before checkout (refresh FX/duty), returns canonical CartMandate VC |
| 5 | submit_intent | Submit AP2 IntentMandate VC + signed CartMandate, returns checkout URL + signed PaymentMandate |
Canonical 5-tool surface per the Semore MCP commerce spec. Production Semore MCP server runs at <https://mcp.semore.net>. This OSS package ships schemas + reference handlers so merchants can validate integrations locally.
Install
npm install @semore/mcp-commerce zodUse the published MCP server (Claude Desktop / ChatGPT / Gemini)
// Claude Desktop config — `claude_desktop_config.json`
{
"mcpServers": {
"semore": {
"command": "npx",
"args": ["-y", "@semore/mcp-commerce"]
}
}
}Or discover via the official MCP Registry:
curl "https://registry.modelcontextprotocol.io/v0/servers?search=semore"
# → io.github.semorehq/[email protected]Usage — schema-only (validate integrations)
import { searchProductTool } from "@semore/mcp-commerce/tools/search-product";
const parsed = searchProductTool.inputSchema.parse({
q: "sunscreen",
lang: "en",
category: "kbeauty",
limit: 10,
});
const result = await searchProductTool.handler(parsed);Usage — boot a minimal MCP server
import { createMcpServer } from "@semore/mcp-commerce";
const server = createMcpServer({
// Wire your own catalog / cart / order resolvers here.
// Default skeleton resolvers return deterministic fixtures useful for local tests.
});
// Then expose over your preferred transport (stdio, streamable-http, SSE).Companion adapters (5-protocol multi-adapter)
| Adapter | Spec | Status |
|---|---|---|
| @semore/acp-adapter | ACP (Stripe / PayPal) | LIVE |
| @semore/ap2-adapter | AP2 (Google) — IntentMandate / CartMandate / PaymentMandate VC | LIVE |
| @semore/ucp-adapter | UCP (Google + Shopify) | LIVE |
| Visa TAP / MC Agent Pay | Network agentic standards | Phase 1 (signup) |
Compliance & trust
- PCI: SAQ-A (no PAN/CVV transit through the MCP server)
- PIPA §28-8: cross-border consent flow active
- AP2:
did:web:semore.netEd25519 mandate signing (4-party card model preserved) - UCP:
/ucp/capabilityendpoint advertisescommerce.search/commerce.cart/commerce.checkout
Reference
- MCP spec: <https://modelcontextprotocol.io>
- Official MCP Registry: <https://registry.modelcontextprotocol.io>
- Semore production endpoint: <https://mcp.semore.net>
- Whitepaper (v0.1 in progress): <https://semore.net/docs/whitepaper/v0.1>
- Contact:
[email protected]· GitHub @semorehq
License
Apache-2.0 — see LICENSE.
Copyright (c) Semore Founding Team.