66
grade C
11 days ago
glama

ShopGraph

Structured product data from the open web — where platform APIs don't reach. Schema.org + AI extraction. Pay per call via Stripe MPP.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical, 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 7 credentials: CRON_SECRET, GOOGLE_API_KEY, KV_REST_API_TOKEN, SHOPGRAPH_ED25519_PRIVATE_KEY, STRIPE_SECRET_KEY, STRIPE_TEST_SECRET_KEY, STRIPE_WEBHOOK_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configALERT_WEBHOOK_URL
configAPP_URL
🔐 secretCRON_SECRET
configENABLE_BROWSER_FALLBACK
configENABLE_LLM_VALIDATION
🔐 secretGOOGLE_API_KEYGemini API key for LLM fallback
🔐 secretKV_REST_API_TOKEN
configKV_REST_API_URL
configPORT
🔐 secretSHOPGRAPH_ED25519_PRIVATE_KEY
configSTRIPE_PRICE_GROWTH
configSTRIPE_PRICE_STARTER
🔐 secretSTRIPE_SECRET_KEY
🔐 secretSTRIPE_TEST_SECRET_KEYStripe secret key (test or live)
🔐 secretSTRIPE_WEBHOOK_SECRET
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/laundromatic-shopgraph-11pm8p)](https://m8ven.ai/mcp/laundromatic-shopgraph-11pm8p)
commit: 57c999e6ff7b3ff4b4661ab2675c1037d72b97f0
code hash: 1283a527279fc0e2e3d47f4c76dd80ad2630509cf471111decfb749c8cfb119a
verified: 4/11/2026, 2:29:03 PM
view raw JSON →