Essentials MCP Server
Commercetools data access for AI agents with configurable tool permissions.
Data last scanned today · Reviewed today
Overview
Essentials MCP Server provides a TypeScript-based interface for interacting with commercetools environments. It enables AI agents to read, create, and manage resources like products, carts, and quotes directly through the Model Context Protocol.
Our verdict
This server carries a high risk level (43/100) because its security configurations, such as authentication methods and read-only modes, have not yet been editorially reviewed. It is suitable for experimental development environments but should be used with extreme caution in production settings where sensitive commercetools data is involved.
- Supports specific tool scoping with read-only modes.
- Small footprint with only six direct dependencies.
- Includes ten contributors helping to mitigate bus-factor risk.
- Authentication methods remain unreviewed for potential vulnerabilities.
- Provided strictly as-is without official support or SLAs.
- Not maintained by the official commercetools vendor.
Tools
| Tool | Description | Risk |
|---|---|---|
| products.read | Read product information | low |
| products.create | Create product information | medium |
| products.update | Update product information | medium |
| project.read | Read project information | low |
| product-search.read | Search products | low |
| category.read | Read category information | low |
| category.create | Create category | medium |
| category.update | Update category | medium |
| channel.read | Read channel information | low |
| channel.create | Create channel | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›What authentication methods does the server support?
The server supports two methods: client credentials (using clientId and clientSecret) and access token authentication (using an accessToken).
›How can I restrict access to read-only operations?
You can limit the server to read-only tools by setting the --tools argument to all.read when running the server.
›How do I load all available tools?
To load all available tools, you must set --tools=all and provide the --isAdmin=true flag.
›Is there a way to disable dynamic tool loading?
Yes, you can disable dynamic tool loading by setting the dynamicToolLoadingThreshold argument to a very high value, such as 650.
›What are the support expectations for this server?
The server is provided as an early access service on an as-is basis, and no Service Level Agreement applies.
Changelog
- Fix@commercetools/mcp-essentials@2.4.2
2025-11-24
- Fix@commercetools/agent-essentials@3.5.1
2025-11-24
- Fix@commercetools/mcp-essentials@2.4.1
2025-11-18
- New@commercetools/agent-essentials@3.5.0
2025-11-18
- Fix@commercetools/mcp-essentials@2.4.0
2025-11-17
- New@commercetools/agent-essentials@3.4.0
2025-11-17
- Fix@commercetools/mcp-essentials@2.3.0
2025-10-06
- Fix@commercetools/agent-essentials@3.3.0
2025-10-06
- Fix@commercetools/mcp-essentials@2.2.1
2025-09-11
- New@commercetools/agent-essentials@3.2.0
2025-09-11
Badge
Maintain this server? Add the live badge to your README.