
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@buywhere/mcp-server
Advanced tools
Product search API for AI agents via Model Context Protocol. Search & compare 11M+ products across Singapore, SEA, and US markets. Multi-currency pricing, inventory, and deal discovery — built for AI agent commerce, not store management. - Win the "Build
AI agents use BuyWhere to search, compare prices, and discover deals across 11M+ products in Singapore, Southeast Asia, and US markets — in real time.
Join the "Build With BuyWhere" AI Agent Developer Challenge! Use the BuyWhere MCP server to create AI agents that search, compare, and recommend products across Singapore, SEA, and US markets.
Product search API for AI agents via Model Context Protocol. Search & compare 11M+ products — built for AI agent commerce, not store management.
Works with Claude Desktop, Cursor, VS Code Copilot, Cline, Windsurf, OpenCode, Codex, Continue.dev, and any MCP-compatible client. Also supports Agent-to-Agent (A2A) protocol.

44-second demo: product search, deal discovery, price comparison, and multi-region support.
User: "Find me wireless earbuds under $50 available in Singapore"
Agent: [calls search_products → returns 5 matching products]
User: "Compare the top 3"
Agent: [calls compare_prices → side-by-side with best-value pick]
export BUYWHERE_API_KEY=bw_live_xxxx
npx -y @buywhere/mcp-server
Get your free API key → buywhere.ai/api-keys
Read the BuyWhere Engineering Blog for deep dives on MCP architecture, agent commerce, and the ecosystem.
| Tool | Description |
|---|---|
search_products | Search catalog by keyword, category, price, region |
get_product | Full product details by ID (prices, specs, images) |
compare_prices | Side-by-side comparison of 2–5 products |
get_price | Current prices across all merchants for one product |
get_affiliate_link | Click-tracked affiliate URL for a product |
get_catalog | Available product category taxonomy |
Add to claude_desktop_config.json:
{
"mcpServers": {
"buywhere": {
"command": "npx",
"args": ["-y", "@buywhere/mcp-server"],
"env": { "BUYWHERE_API_KEY": "bw_live_xxxx" }
}
}
}
Add to your MCP settings file:
{
"mcpServers": {
"buywhere": {
"command": "npx",
"args": ["-y", "@buywhere/mcp-server"],
"env": { "BUYWHERE_API_KEY": "bw_live_xxxx" }
}
}
}
Add to ~/.windsurf/mcp.json:
{
"mcpServers": {
"buywhere": {
"command": "npx",
"args": ["-y", "@buywhere/mcp-server"],
"env": { "BUYWHERE_API_KEY": "bw_live_xxxx" }
}
}
}
Add to opencode.json:
{
"mcpServers": {
"buywhere": {
"command": "npx",
"args": ["-y", "@buywhere/mcp-server"],
"env": { "BUYWHERE_API_KEY": "bw_live_xxxx" }
}
}
}
Add to ~/.continue/config.json:
{
"experimental": {
"mcpServers": {
"buywhere": {
"command": "npx",
"args": ["-y", "@buywhere/mcp-server"],
"env": { "BUYWHERE_API_KEY": "bw_live_xxxx" }
}
}
}
}
| Variable | Default | Description |
|---|---|---|
BUYWHERE_API_KEY | (required) | API key from buywhere.ai/api-keys |
BUYWHERE_API_URL | https://api.buywhere.ai/mcp | Custom API base URL |
# Run directly (no install)
npx -y @buywhere/mcp-server
# Install globally
npm install -g @buywhere/mcp-server
buywhere-mcp
Developer's AI Agent (Claude, Cursor, etc.)
│
├── MCP Protocol (stdio)
│
├── @buywhere/mcp-server
│ ├── search_products(q, category, min_price, max_price, country_code)
│ ├── get_product(product_id)
│ ├── compare_prices(product_ids[])
│ ├── get_price(product_id)
│ ├── get_affiliate_link(product_id, platform)
│ └── get_catalog()
│
└── BuyWhere API (api.buywhere.ai)
└── 11M+ products across SG, SEA, US
git clone https://github.com/BuyWhere/buywhere-mcp.git
cd buywhere-mcp
npm install
npm run build
npm start
BuyWhere is a product search API for AI agents. We aggregate 11M+ products from Singapore, Southeast Asia, and US markets into a single, agent-friendly interface — no store management, no Shopify integration. Just search and compare products in real time.
| Protocol | Support |
|---|---|
| MCP (Model Context Protocol) | Full support — 6 tools, stdio transport |
| A2A (Agent-to-Agent) | Multi-agent task delegation — Agent Card |
See CONTRIBUTING.md for how to report issues, submit PRs, and suggest features.
If you find this project useful:
MIT
FAQs
Stdio bridge to the hosted BuyWhere MCP server — 300M+ products, 150,000+ stores, deliver_to ranking.
The npm package @buywhere/mcp-server receives a total of 90 weekly downloads. As such, @buywhere/mcp-server popularity was classified as not popular.
We found that @buywhere/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.