Back to MCP Trust Indexm8ven
71
/ 100
24 days ago
glama

mcp-cn-commerce

A suite of MCP servers that give AI agents read-only access to Chinese e-commerce platform business data, including advertising, orders, products, and more from platforms like Douyin, JD.com, Taobao, etc.

→ TonyWang-hub/mcp-cn-commerce· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 22 credentials: DOUDIAN_APP_KEY, DOUDIAN_APP_SECRET, DOUDIAN_ACCESS_TOKEN, JD_APP_KEY, JD_APP_SECRET, JD_ACCESS_TOKEN, KUAISHOU_APP_KEY, KUAISHOU_APP_SECRET, KUAISHOU_SIGN_SECRET, KUAISHOU_ACCESS_TOKEN, OCEANENGINE_APP_KEY, OCEANENGINE_APP_SECRET, OCEANENGINE_ACCESS_TOKEN, PINDUODUO_CLIENT_SECRET, PINDUODUO_ACCESS_TOKEN, TAOBAO_APP_KEY, TAOBAO_APP_SECRET, TAOBAO_ACCESS_TOKEN, WX_APP_SECRET, WX_ACCESS_TOKEN, XHS_CLIENT_SECRET, XHS_ACCESS_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretDOUDIAN_APP_KEY— export ="你的 App Key"
🔐 secretDOUDIAN_APP_SECRET— export ="你的 App Secret"
configDOUDIAN_SHOP_ID— export ="你的店铺 ID"
🔐 secretDOUDIAN_ACCESS_TOKEN— export ="你的 Access Token"
🔐 secretJD_APP_KEY— export ="你的 App Key"
🔐 secretJD_APP_SECRET— export ="你的 App Secret"
🔐 secretJD_ACCESS_TOKEN— export ="你的 Access Token"
🔐 secretKUAISHOU_APP_KEY
🔐 secretKUAISHOU_APP_SECRET
🔐 secretKUAISHOU_SIGN_SECRET
🔐 secretKUAISHOU_ACCESS_TOKEN
🔐 secretOCEANENGINE_APP_KEY— export ="你的 App Key"
🔐 secretOCEANENGINE_APP_SECRET— export ="你的 App Secret"
🔐 secretOCEANENGINE_ACCESS_TOKEN— export ="你的 Access Token"
configPINDUODUO_CLIENT_ID
🔐 secretPINDUODUO_CLIENT_SECRET
🔐 secretPINDUODUO_ACCESS_TOKEN
🔐 secretTAOBAO_APP_KEY
🔐 secretTAOBAO_APP_SECRET
🔐 secretTAOBAO_ACCESS_TOKEN
configWX_APP_ID
🔐 secretWX_APP_SECRET
🔐 secretWX_ACCESS_TOKEN
configXHS_CLIENT_ID
🔐 secretXHS_CLIENT_SECRET
🔐 secretXHS_ACCESS_TOKEN
configMCP_CN_COMMERCE_LANG
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/tonywang-hub-mcp-cn-commerce-s75555)](https://m8ven.ai/mcp/tonywang-hub-mcp-cn-commerce-s75555)
commit: 8507c6d1dde3435ed39ee92e0248482ac7b348ec
code hash: 035214c15b8652b2dd9dc24f362c1531719dfaf515d3280523bdf30d28689bc1
verified: 7/7/2026, 10:04:53 AM
view raw JSON →