
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
Order anything from your terminal. Built for AI agents and humans.
CLISHOP is an open-source CLI that lets AI agents and humans search for products across multiple stores, compare prices, and place real orders — all from the terminal. Anyone can sell on CLISHOP using a Dark Store.
Requires Node.js ≥ 18. Works on macOS, Windows, and Linux/WSL.
npm install -g clishop
This gives you two commands: clishop (the CLI) and clishop-mcp (the MCP server for AI agents).
Once the ClawHub package is published, install CLISHOP into an OpenClaw workspace with:
openclaw plugins install clawhub:clishop
The bundle exposes the CLISHOP skill under skills/clishop/SKILL.md and merges the packaged MCP defaults from .mcp.json so OpenClaw can launch the bundled CLISHOP MCP runtime locally without fetching npm code at startup.
CLISHOP works out of the box on Linux and WSL. On systems without a native keychain, tokens are stored in a local file (~/.config/clishop/auth.json) with restricted permissions.
For native keychain support (optional):
sudo apt install libsecret-1-0
Run clishop doctor to check your system's compatibility.
git clone https://github.com/DavooxBv2/CLISHOP.git
cd CLISHOP
npm install
npm run build
npm link
You can create your account on clishop.ai or do everything from the CLI.
Setup only needs an email address. Search first, then add your address and payment method when you're ready to buy.
For OpenClaw, MCP clients, Claude-style shells, and other tool runners, use:
clishop setup start --email user@example.com --json
setup start returns immediately with account-ready status and stores auth locally.
In OpenClaw, prefer the installed CLISHOP MCP tools over CLI shell commands. For address management, the intended flow is to call list_addresses first, then add_address non-interactively with any known fields, and ask the user only for missing required address fields (label, firstName, lastName, line1, city, postalCode, country). For payments, use add_payment_method to generate a secure setup link for the human, then check list_payment_methods after the human completes the web flow. The agent should never ask for raw card details in chat.
clishop search <query>clishop address addclishop payment addAfter setup is complete, add a shipping address and start ordering:
$ clishop search "wireless headphones"
🔍 Search results for "wireless headphones"
1 Sony WH-1000XM5 $278.00
SUPERSTORE · ★ 8.1 · Free shipping · 3-5 days
2 JBL Tune 770NC Wireless $79.95
EveryMarket · ★ 7.9 · $5.99 shipping · 5-8 days
$ clishop info 1
Sony WH-1000XM5
─────────────────────────────────────
Price: $278.00
Store: SUPERSTORE (★ 8.1)
Shipping: Free · 3-5 business days
Returns: 30-day free returns
In stock: Yes
Industry-leading noise cancellation with
Auto NC Optimizer. 30-hour battery life.
Multipoint connection for two devices.
clishop buy 1
Tip: use result numbers from a search anywhere —
clishop info 1 2 3orclishop buy 2.
If something isn't working, run:
clishop doctor
This checks keychain availability, token storage, authentication status, and API connectivity.
┌─────────────────────────────┐
│ AI Agent / Script / Human │
└──────────────┬──────────────┘
│
┌───────▼───────┐
│ CLISHOP CLI │ ← this repo
│ (Node.js) │
└───────┬───────┘
│ HTTPS
┌───────▼───────┐
│ CLISHOP API │ ← backend (Vercel)
└───────┬───────┘
│
┌──────────┼──────────┐
▼ ▼ ▼
Store A Store B Store C ← vendor Dark Stores
You can run your own store with the Dark Store template. Define your catalog, shipping rules, and pricing in YAML, deploy to Vercel, and you're live. No website needed.
git clone https://github.com/DavooxBv2/CLISHOP.git
cd CLISHOP && npm install
npm run dev -- search "headphones" # Dev mode (no build needed)
npm run build # Production build
npm run lint # Type-check
CLISHOP ships as a native MCP server with 46 tools. Any MCP-compatible client gets shopping capabilities out of the box.
clishop-mcp # If installed globally
node ./dist/mcp.js # From the installed package directory
The MCP onboarding tools now follow the same email-first model:
setup creates the account immediately from the email addresssetup_status remains available only for legacy setup IDsSee the MCP setup guides for VS Code, Claude Desktop, Cursor, and Windsurf configuration.
Full command reference, agent configuration, search filters, and more:
FAQs
CLISHOP — Order anything from your terminal
We found that clishop demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.