Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
By Sarah Gooding - Oct 21, 2026
New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
@sellbase/mcp
Advanced tools
@sellbase/mcp
MCP server so AI agents (Claude Code, Cursor, any MCP client) can set up and run a Sellbase store.
Tools include:
store_status,product_upsert,products_import,products_bulk,integration_connect;test_purchase,order_action,order_refund,order_create;discount_upsert,collection_upsert,webhook_setup,docs_searchand more.
Money and destructive actions require confirm: true after the owner agrees, and everything is written to the audit log.
sellbase init registers it for you (.mcp.json, .cursor/mcp.json). To run it by hand:
SELLBASE_URL=… SELLBASE_API_TOKEN=sb_live_… npx sellbase mcp
Part of Sellbase, open source commerce that lives inside your project. MIT licensed.
FAQs
Sellbase MCP server: lets AI agents set up and run the store.
The npm package @sellbase/mcp receives a total of 14 weekly downloads. As such, @sellbase/mcp popularity was classified as not popular.
We found that @sellbase/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 28 Sep 2026
Related posts
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
By Sarah Gooding - Oct 20, 2026
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
By Sarah Gooding - Oct 16, 2026