Back to Home
arpitSrinet icon

ReachMcp

by arpitSrinet

Overview

The Reach Mobile MCP server provides conversational commerce capabilities, enabling users to interact with an AI to browse mobile plans, devices, check coverage, manage their shopping cart, and complete purchases.

Installation

Run Command
npm start

Environment Variables

  • MCP_TRANSPORT
  • PORT
  • ENABLE_DEV_SERVER
  • REACH_ACCOUNT_ACCESS_KEY_ID
  • REACH_ACCOUNT_ACCESS_SECRET_KEY
  • REACH_XAPI_KEY
  • REACH_API_BASE_URL
  • REQUIRE_ENV_VARS
  • NODE_ENV
  • ALLOWED_ORIGINS
  • SSL_KEY_PATH
  • SSL_CERT_PATH
  • MONGODB_URI
  • MONGODB_DB_NAME

Security Notes

Critical security risks identified: Hardcoded API keys and authorization tokens are present in `config/tenantConfig.js` (for Reach API development defaults), `services/deviceService.js` (for Shopware API access key and protection API authorization token). These exposed secrets could allow unauthorized access or misuse of connected APIs. Additionally, the CORS configuration in `server.js` defaults to allowing all origins (`*`) if `ALLOWED_ORIGINS` is not explicitly set, which is a significant security vulnerability in web deployments. The `rejectUnauthorized: false` for HTTPS in test scripts is acceptable for testing self-signed certs but should not be in production code for external connections.

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassMedium
Avg Tokens1000
Stars0
Forks0
Last Update2026-01-19

Tags

Conversational AIE-commerceMobile CommerceChatGPT PluginMCP Server