Store Canary

io.github.erikras由 GitHub 帳號 erikras 發布v1.1.0更新於 Oct 30, 2026

Free read-only WooCommerce checks: store, SSL, exposure, SEO, speed, products, policies + 3 prompts

已驗證Streamable HTTP可網頁執行安全與監控資料與分析商業與電商

概覽

AI 產生的概覽

託管式唯讀 MCP 伺服器,從外部檢查公開的 WooCommerce 商店,並給出通過/警告/失敗結論與修正建議。

可以做什麼
  • 執行整體健康檢查:首頁是否可連線、HTTPS、WooCommerce 偵測、購物車與結帳頁載入、結帳頁付款標示
  • 檢查 SSL:憑證是否被接受、http 是否永久重新導向至 https、重新導向鏈長度與 HSTS 標頭
  • 檢查暴露面:WordPress、WooCommerce、外掛與 PHP 版本、公開 readme 與可讀取的除錯記錄檔
  • 檢查 SEO 基本項目:robots.txt、XML 網站地圖、首頁標題、meta 描述與 noindex
  • 測速:各取一次首頁、商品頁與購物車的下載時間,並抽樣最多 10 個商品檢查缺價、缺圖或缺貨
  • 核對隱私、條款、運送與退貨政策連結是否可開啟,並用白話解釋發現代碼與修正建議
適用情境
適合需要快速從外部掌握某個 WooCommerce 商店的健康、安全衛生、SEO 或速度狀況時使用,例如促銷前自查或排查結帳異常,無需安裝或登入。
執行需求
遠端 Streamable HTTP 端點 mcp.storecanary.app,不需帳號、API 金鑰或驗證標頭;僅支援 stdio 的用戶端可透過 npx mcp-remote 橋接。被檢查的商店必須是公開網址(不支援 IP、私有網路或非標準連接埠)。
安裝前請注意
檢查會向你提供的商店網址送出 GET 請求,該位址會傳給此服務;據稱不保存網址、結果與 IP。每連線約每分鐘 10 次檢查的限制。速度僅為單次取樣而非實驗室測試,憑證到期日不可見。不做持續監控或排程,也不會寫入、登入或操作購物車。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Store Canary,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.erikras%2Fstore-canary/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "store-canary": {
      "type": "http",
      "url": "https://mcp.storecanary.app/mcp"
    }
  }
}

README

[Store Canary logo]

Store Canary MCP connector

A free, hosted, read-only MCP server that checks a public WooCommerce store from the outside and answers in plain pass / warn / fail lines. No account, no API key, no install.

Connector address: https://mcp.storecanary.app/mcp (Streamable HTTP, no authentication)

Docs: https://storecanary.app/mcp

This repository only documents the hosted connector. It contains no server code.

Tools (all read-only)

ToolWhat it checks
check_storeOverall health: homepage reachable, HTTPS valid and redirects sane, WooCommerce detected, /cart/ and /checkout/ load, payment markers visible on checkout.
check_sslCertificate accepted, http:// permanently redirects to https://, short HTTPS-only redirect chain, HSTS header set.
check_exposureWordPress, WooCommerce, plugin and PHP versions shown publicly, a public /readme.html, a readable /wp-content/debug.log (log contents are never returned or kept).
check_seo_basicsrobots.txt (and whether it blocks the whole site), the XML sitemap, homepage title and meta description, homepage noindex.
check_speedTimes one download each of the homepage, one product page and the cart (one sample per page, not a lab test).
check_productsSamples up to 10 published products from the public WooCommerce Store API for missing prices, missing images and out-of-stock items.
check_policiesHomepage links to privacy, terms, shipping and returns/refunds pages, and each linked page loads.
explain_findingExplains any finding code (e.g. ssl_hsts, exposure_debug_log) in plain words, with a suggested fix. Makes no network requests.

Every tool takes a store url (except explain_finding, which takes a code). Checks use GET requests only: they never log in, add to cart or submit forms. Each runs once, when you ask; nothing is monitored or scheduled.

Starter prompts

  • black_friday_audit — Audit my WooCommerce store before Black Friday. Runs all seven checks and turns them into a prioritized pre-sale fix list.
  • checkout_check — Is my checkout working? Checks that the cart, checkout and payment methods load, and explains anything that doesn't.
  • explain_finding — Explain this finding. Explains a Store Canary finding id with a suggested fix.

Setup

ChatGPT

Until Store Canary is in ChatGPT's app directory, enable developer mode and add a custom connector with the URL https://mcp.storecanary.app/mcp/chatgpt and no authentication.

Claude

Open Settings → Connectors → Add custom connector and paste https://mcp.storecanary.app/mcp.

Cursor

Add to your mcp.json:

json
{  "mcpServers": {    "store-canary": { "url": "https://mcp.storecanary.app/mcp" }  }}

Cline and other MCP clients

Add a remote server over Streamable HTTP at https://mcp.storecanary.app/mcp. No auth headers are needed. For clients that only speak stdio:

json
{  "mcpServers": {    "store-canary": {      "command": "npx",      "args": ["-y", "mcp-remote", "https://mcp.storecanary.app/mcp"]    }  }}

Then ask: "Check my store at example.com with Store Canary."

Limits and safety

  • Up to 10 checks a minute per connection, plus a shared cap.
  • About five GET requests per check, no cookies, done in under 10 seconds. Requests identify as StoreCanaryBot.
  • Public web addresses only: no IP addresses, private networks or unusual ports.

Privacy

Store Canary does not store the store URLs you check, their results, or your IP address. See the privacy policy.

Support

Email [email protected] or visit https://storecanary.app/mcp.

Built by Form Nerd, LLC. Licensed under MIT.

來源:README.md,提交 2a09352

工具

8

check_store

Check a WooCommerce store

Check a public WooCommerce store from the outside: is it reachable, is HTTPS valid and are redirects sane, is WooCommerce detected, do /cart/ and /checkout/ load, and are payment markers visible on checkout. Read-only: GET requests only, never adds to cart, logs in or submits forms. Returns pass/warn/fail findings plus a link to the full audit.

輸入參數url必填

check_ssl

Check a store's HTTPS setup

Check that a store's HTTPS certificate is accepted, http:// permanently redirects to https://, the redirect chain is short and stays on HTTPS, and an HSTS header is set. The exact certificate expiry date isn't visible to an outside fetch. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.

輸入參數url必填

check_exposure

Check what a store exposes publicly

Flag WordPress, WooCommerce, plugin and PHP versions a store shows publicly (generator tags, asset ?ver= values, X-Powered-By), a public /readme.html and a readable /wp-content/debug.log. Log contents are never returned or kept. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.

輸入參數url必填

check_seo_basics

Check a store's SEO basics

Check a store's robots.txt (and whether it blocks the whole site), its XML sitemap, the homepage title and meta description, and noindex on the homepage. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.

輸入參數url必填

check_speed

Time a store's key pages

Time one download each of a store's homepage, one product page and the cart from Cloudflare's network. One sample per page, not a lab test or an average. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.

輸入參數url必填

check_products

Sample a store's products

Read up to 10 published products from the public WooCommerce Store API and flag missing prices, missing images and out-of-stock items. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.

輸入參數url必填

check_policies

Check a store's policy pages

Check that the homepage links to privacy, terms, shipping and returns/refunds pages, and that each linked page on the same site loads. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.

輸入參數url必填

explain_finding

Explain a Store Canary finding

Explain a finding code returned by any Store Canary tool (for example ssl_hsts or exposure_debug_log) in plain words, with a suggested fix. Makes no network requests.

輸入參數code必填

版本歷史

2
  1. v1.1.0最新Oct 30, 2026
  2. v1.0.0Oct 29, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分