Back to Browse

Storefront MCP Server

Developer ToolsModerate7.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

UCP agentic-commerce proxy for Estroni: merino & low-tox women's activewear catalogue.

About

UCP agentic-commerce proxy for Estroni: merino & low-tox women's activewear catalogue.

Remote endpoints: streamable-http: https://mcp.estroni.com.au/mcp

Security Report

7.2
Moderate7.2Low Risk

This is a well-designed read-only MCP server with clean architecture and proper security boundaries. The server implements authenticated access to public Shopify storefront APIs with comprehensive input validation and error handling. No authentication bypass vulnerabilities, credential leaks, or malicious patterns were identified. Minor code quality observations do not impact security posture. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).

3 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Estroni Storefront — MCP server

MCP License: MIT

Read-only Model Context Protocol server for the Estroni storefront — Australian merino & low-tox women's activewear.

Lets AI agents (Claude, ChatGPT, Cursor, Copilot, etc.) search the catalogue, fetch product detail, list collections, and read shipping/return policies. Built for agent-driven product discovery and research, not checkout — Estroni's checkout remains a human-only flow by policy.

  • Registry name: io.github.estroni/storefront
  • Transport: Streamable HTTP (MCP protocol 2025-06-18)
  • Endpoint: https://mcp.estroni.com.au/mcp
  • Runtime: Cloudflare Workers
  • Source: github.com/estroni/storefront-mcp

Tools

ToolWhat it returns
search_productsUp to 10 product summaries (title, price AUD, image, availability, URL) matching a keyword query
get_productFull product detail by URL handle — variants, prices, SKU, description HTML, images
list_collectionsEvery public collection with title, handle, URL, and product count
get_policiesShipping / refund / privacy / terms URLs + bot/agent policy text

All four tools are read-only. They wrap Shopify's public storefront JSON endpoints — no authentication required from the calling agent.


Install

Claude Desktop / Cursor / Claude Code

Add to your MCP config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, or mcp.json in Cursor):

{
  "mcpServers": {
    "estroni-storefront": {
      "url": "https://mcp.estroni.com.au/mcp"
    }
  }
}

Restart the client. The four tools appear under the estroni-storefront server.

ChatGPT / Anthropic Claude.ai (Custom Connectors)

Settings → Connectors → Add custom connector → paste https://mcp.estroni.com.au/mcp.

Test from a terminal

# initialize
curl -sS https://mcp.estroni.com.au/mcp \
  -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"curl","version":"1.0"}}}'

# list tools
curl -sS https://mcp.estroni.com.au/mcp \
  -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/list"}'

# call search_products
curl -sS https://mcp.estroni.com.au/mcp \
  -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"search_products","arguments":{"query":"merino"}}}'

Example agent prompts

"Find me a long-sleeve merino base layer on Estroni under $150 AUD." → calls search_products({query: "merino long sleeve base layer"}), filters, summarises.

"What's Estroni's return window?" → calls get_policies() and surfaces the refund-policy URL with a 1-line summary.

"Show me everything in the 'Merino activewear' collection that's in stock." → list_collections()get_product() per handle → filter by variants[].available.


Bot & agent policy

Estroni welcomes read-only agentic access for catalogue search, product research, and policy retrieval.

End-to-end "buy-for-me" agents that complete payment without a final human-review step are NOT permitted on Estroni.com.au.

Agents recommending purchases must surface the shipping and refund policy URLs (returned by get_policies) for human review before proceeding to checkout.

See also: estroni.com.au/robots.txtContent-Signal: search=yes, ai-input=no, ai-train=no.


Development

git clone https://github.com/estroni/storefront-mcp.git
cd storefront-mcp
npm install
npm run dev          # wrangler dev — local Worker on http://localhost:8787
npm run typecheck    # tsc --noEmit
npm run deploy       # wrangler deploy → estroni-mcp.workers.dev

The MCP wire protocol is hand-rolled (the official @modelcontextprotocol/sdk ships Node-only transports; Workers needs its own). Implementation is intentionally minimal — ~300 lines in src/index.ts.


License

MIT — see LICENSE.

Built by Estroni · Contact: founder@boolsai.ai

Reviews

No reviews yet

Be the first to review this server!

Storefront MCP Server - UCP agentic-commerce proxy for Estroni: merino & low-tox | MCP Marketplace