Is Cn Commerce MCP server safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
No critical or high findings in the latest scan.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
1 medium
- Code scan24 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 5 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumsubprocess with shell=True
exec.shell-truemcp_cn_commerce-0.1.5/pyproject.toml: …not used "B602", # subprocess with shell=True — not used "B603", # subprocess wi…
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Cn Commerce does
- A1 Yandex KIT MCPA1 Yandex KIT MCP server for the Yandex KIT e-commerce API: products, orders, discounts, webhooks.not reviewedGrowingB
- ShopwareQuery and safely manage a Shopware 6 shop: products, orders, customers, stock, audits, reports.not reviewedEstablishedB
WebCake StorefrontBuild pages and manage products, orders, and content on the WebCake/StoreCake storefront builder.not reviewedGrowingA
