Back to Browse

Compshop MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Search 350+ compensation surveys by industry, region, or job title. Independent directory.

About

Search 350+ compensation surveys by industry, region, or job title. Independent directory.

Remote endpoints: streamable-http: https://www.comp-shop.com/api/mcp

Security Report

4.8
Use Caution4.8High Risk

CompShop is a well-structured Next.js application serving as a directory of compensation surveys with read-only MCP tools backed by a local SQLite database. The code exhibits good security practices with proper input validation, no hardcoded credentials, and appropriately scoped permissions matching its purpose as a developer tool for survey discovery. Minor code quality observations exist but do not constitute security vulnerabilities. Supply chain analysis found 12 known vulnerabilities in dependencies (0 critical, 4 high severity).

5 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

CompShop

The independent directory of salary & compensation surveys. Search 350+ reports across 17+ vendors (Mercer, WTW, Aon, SullivanCotter, Gallagher, Pearl Meyer, Empsight, Culpepper, Milliman, MRA, LOMA, Birches Group, Western Management Group, and more) by job title, industry, geography, or publisher.

Tech stack

  • Framework: Next.js 14 (App Router) + TypeScript + Tailwind
  • Database: SQLite (better-sqlite3) with a file-backed DB bundled in the repo
  • Search: server-side FTS-ish query across vendors, reports, job families, positions, and participating orgs
  • SEO: ~3,500 statically-generated indexable pages (vendor / report / family / position) with JSON-LD, OG/Twitter tags, canonical URLs, and an auto-generated sitemap

Local dev

npm install
npm run dev

Open http://localhost:3000.

Data pipelines

Loaders are in scripts/. Each writes to data/compshop.db.

# Add/refresh a vendor (parent row)
npm run db:add-vendor <path-to-json>

# Add/refresh a single report (with optional XLSX position/participant lists)
npm run db:add-report <path-to-directory>

# Batch-load many reports at once
npm run db:add-report-batch "scripts/data/mercer-*"

See scripts/SCRAPING.md for the full data-loading workflow.

Deployment

Deploys to Vercel out of the box. The SQLite DB file (data/compshop.db) is committed to the repo and read at request time by the serverless routes; almost all pages are pre-rendered statically at build time via generateStaticParams + force-static.

Set NEXT_PUBLIC_SITE_URL in your Vercel project settings to your production domain (e.g., https://compshop.io).

Reviews

No reviews yet

Be the first to review this server!