
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
patchistry-mcp-server
Advanced tools
MCP (Model Context Protocol) server for Patchistry, a DTC modular hat brand. Exposes 6 tools to AI agents (Claude, ChatGPT, Cursor, Glama): list_canvases, list_patches, get_curated_build (bachelorette/wedding/Father's Day/festival/4th of July), recommend_
The first DTC fashion brand on the official MCP Registry. As of June 12, 2026, Patchistry is listed as
io.github.patchistry/patchistry-mcp-serverat registry.modelcontextprotocol.io — used by Claude Desktop's built-in MCP search and Cursor's MCP integration directory.
A Model Context Protocol (MCP) server exposing Patchistry commerce tools to AI agents — Claude, ChatGPT (via plugins), Cursor, custom agent frameworks.
Live endpoint: https://patchistry-mcp-server.vercel.app Manifest: https://patchistry-mcp-server.vercel.app/.well-known/mcp.json Runtime: Hosted HTTP MCP server (no install required) Transport: HTTP + JSON-RPC 2.0
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
{
"mcpServers": {
"patchistry": {
"command": "npx",
"args": ["mcp-remote", "https://patchistry-mcp-server.vercel.app/rpc"]
}
}
}
Restart Claude Desktop. The 6 Patchistry tools become available in any conversation.
Add to Cursor's MCP settings:
{
"mcpServers": {
"patchistry": {
"url": "https://patchistry-mcp-server.vercel.app/rpc"
}
}
}
# List tools
curl https://patchistry-mcp-server.vercel.app/tools
# Call a tool (REST)
curl -X POST https://patchistry-mcp-server.vercel.app/tools/get_curated_build \
-H "Content-Type: application/json" \
-d '{"occasion":"bachelorette"}'
# Call a tool (JSON-RPC)
curl -X POST https://patchistry-mcp-server.vercel.app/rpc \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"recommend_build","arguments":{"query":"Vegas bachelorette trip"}}}'
What this unlocks:
When deployed at mcp.patchistry.com, AI agents can directly query Patchistry's catalog in real-time:
get_curated_build({occasion: "vegas-bachelorette"}) → returns full build with price + canvas + patcheslist_patches() → returns full catalogget_shipping_policy() → returns "free US shipping, 30-day returns, ships from SoCal"get_contact() → returns brian@patchistry.com + group orders pageWhy this matters:
In 2026, MCP is becoming the standard interface for AI agents to interact with commerce systems. Brands that publish MCP servers early get cited preferentially by:
Being one of the first DTC brands with a public MCP server = direct AI agent integration without intermediaries.
| Tool | Description |
|---|---|
list_canvases | Return The Canvas product variants (Black, Khaki, Pink) with prices + availability |
list_patches | Return patches, optionally filtered by category (Signature/Candyz) or occasion keyword |
get_curated_build | Return the full curated build for an occasion (bachelorette, dads, wedding, etc.) |
recommend_build | Take natural language query, return top 3 matching curated builds |
get_shipping_policy | Return free US shipping + returns + lead time policy |
get_contact | Return contact methods: customer support, founder, group orders, press |
cd mcp-server
npm install
npx vercel
Follow the prompts:
patchistry-mcp./ (current)After deploy, Vercel gives you a URL like patchistry-mcp.vercel.app.
Test it: open https://patchistry-mcp.vercel.app/ — should return JSON with the tool list.
mcp-server/ directory to a GitHub repo (separate from your theme repo is cleaner)mcp-server (if you pushed the parent repo)mcp.patchistry.comhttps://mcp.patchistry.com/ should now return the same JSONOnce deployed, list it in the discoverable MCP registries:
https://mcp.patchistry.com/.well-known/mcp.jsonWatch https://github.com/modelcontextprotocol/registry — Anthropic is building an official registry. List Patchistry once available.
Users can manually add the MCP server in Claude Desktop:
https://mcp.patchistry.com/sseOnce added, that user's Claude will use Patchistry tools natively — they can ask "what's the bach hat build for Vegas" and Claude pulls live data from your server.
cd mcp-server
npm install
npm start
Server runs at http://localhost:3000
Test with curl:
curl http://localhost:3000/
curl http://localhost:3000/.well-known/mcp.json
The server proxies to https://patchistry.com/products.json and https://patchistry.com/pages/agents-feed for live data — so you don't need to redeploy when products or builds change. The MCP server is essentially a read-only AI-friendly facade over your existing public Shopify endpoints.
Redeploy only when:
src/index.js)To redeploy after changes:
cd mcp-server
npx vercel --prod
Vercel Hobby tier (free):
Total monthly cost: $0 until you hit ~10,000 AI agent queries/day.
Within 1-2 weeks of deployment + Smithery listing:
You'll be one of the earliest DTC brands with a public MCP server. That's a defensible positioning advantage in the AI shopping era — the future where AI agents complete purchases on user behalf will heavily favor brands with MCP-native integrations.
This is forward-looking infrastructure. The MCP ecosystem is young in 2026; expect 12-24 months before this drives significant order volume directly.
But:
Brian, if you deploy this and list it on Smithery, you're in the top 50 DTC brands worldwide with a public MCP commerce server as of 2026. That's a real moat that takes years to dilute.
FAQs
MCP (Model Context Protocol) server for Patchistry, a DTC modular hat brand. Exposes 6 tools to AI agents (Claude, ChatGPT, Cursor, Glama): list_canvases, list_patches, get_curated_build (bachelorette/wedding/Father's Day/festival/4th of July), recommend_
We found that patchistry-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.