Back to Browse

Is Agentic MCP Server

Developer ToolsModerate6.4MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Shop the Is Agentic store with read-only catalog discovery, gift recommendations and cart links.

About

Shop the Is Agentic store with read-only catalog discovery, gift recommendations and cart links.

Remote endpoints: streamable-http: https://mcp.is-agentic.shop/mcp

Security Report

6.4
Moderate6.4Moderate Risk

This is a read-only MCP proxy to the public is-agentic.shop Shopify catalog. It needs no credentials, which fits its purpose, and it restricts upstream fetches to an allowlist of paths, validates redirects, and only builds checkout links without creating orders. The main concerns are low-severity: per-instance in-memory rate limiting and caches that can grow without bound, plus a wildcard CORS policy on the public endpoint. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity).

7 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Is Agentic MCP

A store your agent can shop. Read-only MCP for is-agentic.shop.

Connect to the public Streamable HTTP endpoint:

https://mcp.is-agentic.shop/mcp

For a client that supports remote MCP servers, including Cursor and Claude clients with remote HTTP support, add this server entry to its MCP configuration:

{"mcpServers": {
  "is-agentic": {"type":"http","url":"https://mcp.is-agentic.shop/mcp"}
}}

No API key is needed. Clients must support Streamable HTTP (JSON response mode). Older Claude Desktop versions that only accept a local command need a remote-to-stdio bridge instead of this direct URL. The original Function URL remains available as a fallback.

Tools

  • search_products(query, limit): find products in the public catalog.
  • get_product(handle): retrieve a product and its available variants.
  • list_collections(): browse collection names and handles.
  • get_collection(handle, limit): retrieve collection products.
  • gift_guide(occasion): find gift candidates by occasion.
  • build_cart_link(items, gift_note): make a checkout link, not an order.

For gifting, ask the agent to call gift_guide for an occasion, inspect a product's variants with get_product, and call build_cart_link with the chosen variant IDs and optional note. Open the returned link to review the cart and complete checkout yourself. The server cannot place an order, charge a card, or modify the store.

The endpoint and tools are also described in the store discovery descriptor and agent guide.

Develop

Node.js 20. npm ci && npm test && npm run test:infra runs protocol and infrastructure checks. The handler in lambda/handler.js uses public catalog reads only. node tests/client.js exercises a local loopback MCP client. The CDK stack in infra.js is an optional deployment template and requires explicit CDK_DEFAULT_ACCOUNT and MCP_BOUNDARY_POLICY_ARN environment variables for your own guarded AWS account. Do not deploy it to an account you do not administer.

License

MIT. See LICENSE.

Reviews

No reviews yet

Be the first to review this server!