
Security News
New React Server Components Vulnerabilities: DoS and Source Code Exposure
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.
@commercetools/commerce-mcp
Advanced tools
This documentation focusses on the development of the MCP server. For the user documentation, view the main README.
# navigate to ../typescript
pnpm run build
# navigate to ../modelcontextprotocol
# link the local package
pnpm add link:../typescript
# run the server in terminal
npx ts-node src/index.ts --tools=products.read --clientId=CLIENT_ID --clientSecret=CLIENT_SECRET --authUrl=AUTH_URL --projectKey=PROJECT_KEY --apiUrl=API_URL
# test using mcptools : Install mcptools from https://github.com/f/mcptools
mcp call list_products --params '{"limit": 2}' npx ts-node /<absolute-path>/commerce-agent/modelcontextprotocol/src/index.ts --tools=all \
--projectKey="PROJECT_KEY" \
--clientSecret="CLIENT_SECRET" \
--clientId="CLIENT_ID" \
--authUrl="AUTH_URL" \
--apiUrl="API_URL"
Do not commit the linked package in package.json to the repo
NOTE: This will not work with Claude Desktop unless you uninstall node v16 from your machine!
# navigate to ../typescript
pnpm run build
# navigate to ../modelcontextprotocol
# link the local package
pnpm add link:../typescript
Configure MCP servers in Claude Desktop
{
"mcpServers": {
"commercetools": {
"command": "npx",
"args": [
"ts-node",
"/<absolute-path>/commerce-agent/modelcontextprotocol/src/index.ts",
"--tools=all",
"--projectKey=PROJECT_KEY",
"--clientSecret=CLIENT_SECRET",
"--clientId=CLIENT_ID",
"--authUrl=AUTH_URL",
"--apiUrl=API_URL"
]
}
}
}
To debug your server, you can use the MCP Inspector.
First build the server
npm run build
Run the following command in your terminal:
# Start MCP Inspector and server with all tools
npx @modelcontextprotocol/inspector node dist/index.js --tools=all --clientId=CLIENT_ID --clientSecret=CLIENT_SECRET --projectKey=PROJECT_KEY --authUrl=AUTH_URL --apiUrl=API_URL
CLIENT_ID, CLIENT_SECRET, PROJECT_KEY, AUTH_URL, and API_URL with your actual values.FAQs
A command line tool for setting up commercetools MCP server
We found that @commercetools/commerce-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.

Security News
GitHub has revoked npm classic tokens for publishing; maintainers must migrate, but OpenJS warns OIDC trusted publishing still has risky gaps for critical projects.