
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@ordercore/mcp
Advanced tools
Zero-config MCP server for OrderCore — give an AI agent a commerce catalog + idempotent checkout. No signup: runs a read-only sandbox with no key.
Zero-config MCP server for OrderCore — give an AI agent a commerce catalog + idempotent checkout. No signup required to try it.
# Zero-config: runs a READ-ONLY sandbox on the demo catalog (no API key)
npx @ordercore/mcp
# Full read/write (checkout enabled)
ORDERCORE_API_KEY=oc_live_xxx npx @ordercore/mcp # key: https://ordercore.ai/bootstrap
Register with Claude Code:
claude mcp add ordercore -- npx -y @ordercore/mcp # sandbox
claude mcp add ordercore --env ORDERCORE_API_KEY=oc_live_xxx -- npx -y @ordercore/mcp
Or Claude Desktop / Cursor:
{ "mcpServers": { "ordercore": { "command": "npx", "args": ["-y", "@ordercore/mcp"] } } }
On first run this launcher fetches the native ordercore-mcp binary for your
platform from https://ordercore.ai/downloads, verifies its published SHA-256,
caches it under ~/.cache/ordercore-mcp/, and runs it over the MCP stdio
transport. No build step, no runtime dependencies.
Read: search_products, get_product, get_prices, get_inventory,
get_order_trace. Checkout (needs a full key): create_checkout_session,
update_checkout_session, complete_checkout_session. In sandbox mode the
write tools are hidden until you set ORDERCORE_API_KEY.
ORDERCORE_API_KEY — optional; omit for the read-only sandbox, set a full key
from https://ordercore.ai/bootstrap for checkout.ORDERCORE_BASE_URL — optional; defaults to https://api.ordercore.ai.MIT licensed.
FAQs
Zero-config MCP server for OrderCore — give an AI agent a commerce catalog + idempotent checkout. No signup: runs a read-only sandbox with no key.
We found that @ordercore/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.