Server data from the Official MCP Registry
Structured product data from the open web — Schema.org + AI extraction. Pay per call via Stripe.
Structured product data from the open web — Schema.org + AI extraction. Pay per call via Stripe.
Remote endpoints: streamable-http: https://shopgraph.dev/mcp
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
The server requires Stripe API keys and Google API keys but stores them in environment variables properly. However, it has several concerning security issues including lack of input validation for URLs, shell command execution via Playwright, and potentially dangerous eval-like patterns in TypeScript files that affect the overall security posture. Supply chain analysis found 3 known vulnerabilities in dependencies (1 critical, 2 high severity).
Scanned 4 files · 8 findings
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Be the first to review this server!