Back to Home
commerce-operations-foundation icon

mcp-reference-server

Verified Safe

by commerce-operations-foundation

Overview

Standardize and manage fulfillment operations for AI agents by providing a universal interface to various fulfillment systems.

Installation

Run Command
node dist/index.js

Environment Variables

  • NODE_ENV
  • SERVER_PORT
  • ADAPTER_TYPE
  • ADAPTER_NAME
  • ADAPTER_PACKAGE
  • ADAPTER_PATH
  • ADAPTER_EXPORT
  • ADAPTER_CONFIG
  • LOG_LEVEL
  • LOG_DIR
  • AUTH_ENABLED
  • FEATURE_*

Security Notes

The server's core extensibility mechanism, the `AdapterFactory`, allows dynamic loading of adapters from NPM packages or local files, executing them with full system permissions. This is explicitly highlighted in the codebase as a security warning. Deployers must ensure that only trusted adapter packages/files are configured, especially in production, to prevent arbitrary code execution vulnerabilities. The server does implement configuration validation, log sanitization, and security policy application for production environments (e.g., forcing sanitization and disabling debug logs), which are good practices. However, the inherent risk of dynamic code loading from potentially untrusted sources remains a critical concern if not properly managed by the deployment environment.

Similar Servers

Stats

Interest Score23
Security Score6
Cost ClassMedium
Avg Tokens500
Stars26
Forks13
Last Update2025-12-16

Tags

fulfillmentAIcommerceMCPadapter