66
grade C
11 days ago
glama
ShopGraph
Structured product data from the open web — where platform APIs don't reach. Schema.org + AI extraction. Pay per call via Stripe MPP.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Known vulnerabilities in dependencies: 1 critical, 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 7 credentials: CRON_SECRET, GOOGLE_API_KEY, KV_REST_API_TOKEN, SHOPGRAPH_ED25519_PRIVATE_KEY, STRIPE_SECRET_KEY, STRIPE_TEST_SECRET_KEY, STRIPE_WEBHOOK_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
ALERT_WEBHOOK_URLconfig
APP_URL🔐 secret
CRON_SECRETconfig
ENABLE_BROWSER_FALLBACKconfig
ENABLE_LLM_VALIDATION🔐 secret
GOOGLE_API_KEY— Gemini API key for LLM fallback🔐 secret
KV_REST_API_TOKENconfig
KV_REST_API_URLconfig
PORT🔐 secret
SHOPGRAPH_ED25519_PRIVATE_KEYconfig
STRIPE_PRICE_GROWTHconfig
STRIPE_PRICE_STARTER🔐 secret
STRIPE_SECRET_KEY🔐 secret
STRIPE_TEST_SECRET_KEY— Stripe secret key (test or live)🔐 secret
STRIPE_WEBHOOK_SECRET// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/laundromatic-shopgraph-11pm8p)commit: 57c999e6ff7b3ff4b4661ab2675c1037d72b97f0
code hash: 1283a527279fc0e2e3d47f4c76dd80ad2630509cf471111decfb749c8cfb119a
verified: 4/11/2026, 2:29:03 PM