Commerce Evidence Toolkit

io.github.iamgeorgekelly由 GitHub 账号 iamgeorgekelly 发布v0.1.0更新于 Oct 24, 2026

Read-only local evidence checks for product records, feed snapshots, and dimensions.

已验证STDIO仅桌面数据与分析商业与电商

概览

AI 生成的概览

一个本地、只读的 MCP 服务器,对商品记录、商品源快照和商品尺寸执行三项基于规则的检查。

可以做什么
按选定字段审查单条商品记录,支持 copy 或 mapped 方式及可选的自带证据,返回 clear 或 hold。按商品 ID、证据引用、时间戳和时效策略比较明确的源快照与商品源快照,返回 match、update_needed 或 hold。在相同测量基准下比较命名的长、宽、高,指定单位和毫米容差,返回 match、mismatch 或 hold。每次响应都包含工具版本、文档引用以及带规则集版本的完整结果。
适用场景
适合助手在依据商品数据行动前需要一致、离线的复核意见时使用:检查商品条目、判断商品源快照是否过期,或在声明的容差内比较标注尺寸。也适合遵循已发布的 Agentic Commerce Field Guide 规则、希望把这些检查交给助手执行的团队。
运行要求
以本地进程通过 stdio 运行,需要 Node.js 22 或更高版本。可通过兼容客户端的 MCPB 导入流程安装版本化包,或解压后将客户端指向 server/index.mjs 的绝对路径。从源码运行需要 npm,安装依赖时需要网络;检查本身在本地执行。未声明任何账户、API 密钥或环境变量。
安装前请注意
结果只是本地证据判断,不代表供应商接受、实时商品真实情况、实物适配或兼容性;hold 不是协议错误。引用由调用方自行声明,工具不会抓取或验证,也不会联系商家、修改商品源或下单。它是选定的审查约定,并非完整的供应商模式校验器。请用公布的 SHA-256 校验值核对下载的压缩包,报告中切勿发布客户数据或凭据。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Commerce Evidence Toolkit,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Commerce Evidence Toolkit

Three local, read-only checks for agents working with product data. The package wraps the same versioned comparison rules published in the Agentic Commerce Field Guide.

Version 0.1.0 · MIT licensed. Download the versioned release, or run the source as described below. Registry availability is separate from a GitHub release; consult the live registry for its current state.

What it does

ToolInputsResult
review_product_recordOne product object, optional supplied evidence, copy or mapped methodSelected-field review: clear or hold
compare_feed_snapshotsExplicit source and feed snapshots, item IDs, evidence references, timestamps and age policymatch, update_needed or hold
compare_dimensionsSame item and measurement basis, named length/width/height, units and tolerancematch, mismatch or hold

The checks do not fetch references, authenticate evidence, contact a merchant, change a feed, place orders or send telemetry. A match is not provider acceptance, live product truth, physical fit or compatibility. This is a selected local review contract, not a complete provider schema validator. Hold results are evidence decisions, not protocol failures.

Install the versioned bundle

Download commerce-evidence-toolkit-0.1.0.mcpb and SHA256SUMS from the v0.1.0 release. Check the archive against its published SHA-256 checksum. The bundle contains the server and production dependencies; Node.js 22 or later is required.

Use your compatible client's MCPB import flow, or extract the archive to a directory and configure the absolute path to its server/index.mjs using the JSON example below. MCPB support varies by client. Protocol tests do not establish certification by any desktop app.

A Node package archive is also included in the release. Installing that archive requires npm to install its dependencies. It has not been published to npm.

Run from source

Requires Node.js 22 or later and npm. Dependency installation uses the network; the three comparison operations run locally after installation.

sh
npm ci --ignore-scriptsnpm testnode server/index.mjs

The final command starts an MCP server over standard input/output. It waits for a compatible client; it is not a browser URL. Do not print debug messages to stdout, which carries the protocol.

For a compatible client that accepts an MCP JSON configuration, replace the path below with the absolute location of your checkout:

json
{  "mcpServers": {    "commerce-evidence": {      "command": "node",      "args": ["/absolute/path/agentic-commerce-field-guide/server/index.mjs"]    }  }}

Client configuration locations differ. This example declares the transport and executable; it does not claim every assistant automatically installs or invokes the server.

Try a complete input

The files in examples/ are complete tool arguments, not bare internal records. The three starter examples below are fictional and use frozen times where relevant.

ToolArguments fileExpected example result
compare_dimensionsexamples/dimensions.jsonmatch
compare_feed_snapshotsexamples/feed-snapshots.jsonupdate_needed
review_product_recordexamples/product-record.jsonclear after explicit mapping

Ask your client to call the named tool with that file's JSON object. Every successful response includes structured content with toolVersion, a canonical documentation URL and the full result. Each core result retains its own ruleset version and evidence limitations. Incomplete accepted inputs return holds; malformed envelopes and excessive requests return protocol tool errors. The wrapper caps serialized requests at 200,000 UTF-8 bytes and nesting at 25 levels; individual checks impose narrower limits.

Dimension values are positive decimal strings and explicit units (in, cm, mm, m); tolerance is a nonnegative decimal string in millimetres. Do not silently rename depth to length, treat diameter as two axes, or substitute package measurements. Product-record review covers selected positive USD fields; feed freshness is a selected current USD snapshot contract. References are caller assertions and are never fetched.

One observed comparison

examples/observed-dimensions.json contains the HOLMERUD 40541421 dimensions observed on public US and GB product pages for the September 24 study. It returns match at the declared 2 mm display threshold and mismatch at zero. Fractional inch displays are represented exactly as decimals. The tool does not fetch or authenticate the linked sources. This threshold is not a manufacturing or installation tolerance. The study retains eight complete comparisons and 22 unresolved listings; it is not an industry error-rate estimate.

Verify and package

sh
npm run verify:artifactsnpm testnode scripts/test-clean-install.mjsnpm run bundle

npm run bundle creates a local .mcpb archive with the production dependencies and a SHA-256 file under dist/. The Node package can be built with npm pack. A local package build is not an npm or MCP Registry publication.

The test suite compares all 40 fixture/method cases against their source rules (10 dimensions, 6 freshness, and 12 product records under 2 methods), checks error bounds and input immutability, and invokes all 40 over stdio with the TypeScript SDK client. The clean-install test installs the archive into a temporary directory and calls all three tools. A separate Python SDK client test calls all three examples and an incomplete-input hold. These are protocol tests with synthetic inputs, not independent users or desktop-app certification.

Evidence and scope

provenance.json records the source site commit, actual production download verification time, and SHA-256 for every file in artifacts/. The September 24 snapshot adds dimensions to the existing product-feed and measurement artifacts. Verification recomputes hashes and the earlier portability/freshness cases. Synthetic cases show rule behavior, not merchant error rates or model accuracy.

Primary tool documentation:

Please cite the relevant guide and this version or commit. CITATION.cff provides author metadata. To report a correction, open an issue with the tool version, a minimal non-sensitive input, expected result, actual result and supporting reference. Never post customer data or credentials.

Licensing

Original software, documentation, tests and fictional fixtures are available under the MIT License; see license scope. Third-party dependencies retain their own license notices in the packaged dependency directories. Linked specifications, source pages, images and trademarks are not relicensed by this repository.

来源:README.md,提交 787150d

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v0.1.0最新Sep 25, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分