Back to Browse

Webcake Storefront MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Build pages and manage products, orders, and content on the WebCake/StoreCake storefront builder.

About

Build pages and manage products, orders, and content on the WebCake/StoreCake storefront builder.

Remote endpoints: streamable-http: https://store.toolvn.io.vn/mcp

Security Report

4.2
Use Caution4.2High Risk

This is a well-structured MCP server for WebCake storefront page building with sound security practices overall. Authentication is properly required for sensitive operations (via Bearer JWT tokens and session IDs), permissions align with the server's purpose (network_http for API calls, env_vars for credentials, file operations for caching), and no malicious patterns were detected. Minor findings include basic input validation gaps, broad error handling, and standard code quality observations that do not significantly impact security. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

3 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

What You'll Need

Set these up before or after installing:

Storefront JWT Bearer token (the builder's `jwt` cookie / store_jwt).Required

Environment variable: WEBCAKE_TOKEN

Session id sent as the x-session-id header (the builder's `wsid` cookie).Required

Environment variable: WEBCAKE_SESSION_ID

Named environment preset that fills the API + app base URLs (default prod).Optional

Environment variable: WEBCAKE_ENV

Optional Pexels API key for the search_images tool.Required

Environment variable: PEXELS_API_KEY

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!