ucp-mcp-server

Item: ucp-mcp-server
Rating: 73
Author: M8ven

Let AI assistants shop. An MCP server that gives Claude, Cursor, and any MCP-compatible AI the ability to interact with UCP-enabled merchants.

→ aratan/ucp-mcp-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configUCP_TIMEOUT— 30.0 HTTP request timeout in seconds

configUCP_CONNECT_TIMEOUT— 10.0 Connection timeout in seconds

configUCP_MAX_CONCURRENT— 10 Max concurrent HTTP connections

configUCP_RATE_LIMIT— 100 Max requests per second to merchants

configUCP_MAX_RETRIES— 3 Max retry attempts on failure

configUCP_RETRY_BACKOFF_BASE— 0.5 Base backoff time in seconds

configUCP_RETRY_BACKOFF_MAX— 10.0 Max backoff time in seconds

configUCP_DISCOVERY_CACHE_TTL— 300 Discovery cache TTL in seconds

configUCP_LOG_LEVEL— INFO Logging level

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/aratan-ucp-mcp-server-an585m)](https://m8ven.ai/mcp/aratan-ucp-mcp-server-an585m)

commit: c75bef5f336193fc46689ebc23e332d3764a98a8

code hash: f3e996405e5a1f667ff1460d6995fb586bccb00265de61b6bf0fddaceb33c678

verified: 7/25/2026, 8:35:04 AM

view raw JSON →