Module MCP Server
Magento 2 catalog data access providing structured, rate-limited responses to AI agents.
Data last scanned today · Reviewed today
Overview
Module MCP Server exposes your Magento 2 or Adobe Commerce store catalog to AI models using the Model Context Protocol. By providing direct access to product data, prices, and stock levels, it replaces unreliable screen-scraping techniques with structured, accurate JSON-RPC responses for search and retrieval queries. The server operates as a read-only bridge for anonymous shopper data, ensuring agents can only access information visible to the public. It installs directly via Composer as a Magento module, requiring no additional external services or Node.js sidecars to function within your existing PHP environment.
Our verdict
With a security score of 33/100, this server is classified as high-risk. This rating stems from the fact that it is a community-maintained project rather than an official vendor release and has not undergone an independent editorial review. Users should exercise caution; while the v1.0 release is intentionally limited to read-only operations for anonymous shoppers, the lack of third-party verification makes it better suited for developers testing in non-production environments.
- Read-only design prevents unauthorized cart or checkout modifications
- Zero external dependencies keeps the supply-chain surface area minimal
- Supports native Magento 2.4.6+ environments without sidecars
- Active development with recent commits recorded
- Community-maintained status lacks formal vendor security vetting
- High risk score due to lack of editorial security review
- Requires manual Varnish or LiteSpeed cache bypass configuration
Tools
| Tool | Description | Risk |
|---|---|---|
| search_products | Returns live items: sku, name, price, stock, URL, image, short description + total count. | low |
| get_product | Returns full card: description, live price/stock, URL, image; configurable variants with per-variant option values, price, stock. | low |
| list_categories | Returns active category tree with URLs and product counts. | low |
| get_store_info | Returns store name, currency, locale, ships-to countries, links to llms.txt and /.well-known/ucp. | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What are the system requirements for the Angeo MCP Server?
The server requires Magento Open Source or Adobe Commerce version 2.4.6 or higher, running on PHP versions 8.1 through 8.4.
›Does this server require external services like Redis or a Node.js sidecar?
No, the module is self-contained and does not require Redis, a Node sidecar, or any external SaaS dependencies.
›How do I ensure the MCP server is not cached by my web server?
You must configure Varnish or LiteSpeed to bypass caching for the /mcp endpoint, as cached JSON-RPC responses are invalid.
›What permissions do AI agents have with this module?
Version 1.0 is read-only, meaning agents can only access information available to an anonymous shopper, such as product details, stock, and categories.
›Can I restrict access to the MCP server with authentication?
Yes, you can enable a Bearer Token requirement in the module configuration settings under Stores > Configuration > Angeo > MCP Server.
›How can I improve how well the AI agent recognizes my store?
Set the 'agent/store_label' field in the configuration to the specific name your customers use to identify your business, as this is the primary identifier used by the model.
Badge
Maintain this server? Add the live badge to your README.