Commerce Evidence Toolkit

io.github.iamgeorgekelly由 GitHub 帳號 iamgeorgekelly 發布v0.1.0更新於 Oct 24, 2026

Read-only local evidence checks for product records, feed snapshots, and dimensions.

已驗證STDIO僅桌面資料與分析商業與電商

概覽

AI 產生的概覽

一個本機、唯讀的 MCP 伺服器,對商品記錄、商品饋送快照和商品尺寸執行三項依規則的檢查。

可以做什麼
依選定欄位審查單筆商品記錄,支援 copy 或 mapped 方式及選用的自帶證據,傳回 clear 或 hold。依商品 ID、證據參照、時間戳和時效策略比較明確的來源快照與商品饋送快照,傳回 match、update_needed 或 hold。在相同測量基準下比較命名的長、寬、高,指定單位和毫米容差,傳回 match、mismatch 或 hold。每次回應都包含工具版本、文件參照以及帶規則集版本的完整結果。
適用情境
適合助理在依據商品資料行動前需要一致、離線的複核意見時使用:檢查商品項目、判斷商品饋送快照是否過期,或在宣告的容差內比較標示尺寸。也適合遵循已發布的 Agentic Commerce Field Guide 規則、希望把這些檢查交給助理執行的團隊。
執行需求
以本機程序透過 stdio 執行,需要 Node.js 22 或更新版本。可透過相容用戶端的 MCPB 匯入流程安裝版本化套件,或解壓縮後將用戶端指向 server/index.mjs 的絕對路徑。從原始碼執行需要 npm,安裝相依套件時需要網路;檢查本身在本機執行。未宣告任何帳戶、API 金鑰或環境變數。
安裝前請注意
結果只是本機證據判斷,不代表供應商接受、即時商品真實狀況、實物適配或相容性;hold 不是協定錯誤。參照由呼叫方自行宣告,工具不會擷取或驗證,也不會聯絡商家、修改商品饋送或下單。它是選定的審查約定,並非完整的供應商結構描述驗證器。請用公布的 SHA-256 校驗值核對下載的壓縮檔,報告中切勿發布客戶資料或憑證。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Commerce Evidence Toolkit,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Commerce Evidence Toolkit

Three local, read-only checks for agents working with product data. The package wraps the same versioned comparison rules published in the Agentic Commerce Field Guide.

Version 0.1.0 · MIT licensed. Download the versioned release, or run the source as described below. Registry availability is separate from a GitHub release; consult the live registry for its current state.

What it does

ToolInputsResult
review_product_recordOne product object, optional supplied evidence, copy or mapped methodSelected-field review: clear or hold
compare_feed_snapshotsExplicit source and feed snapshots, item IDs, evidence references, timestamps and age policymatch, update_needed or hold
compare_dimensionsSame item and measurement basis, named length/width/height, units and tolerancematch, mismatch or hold

The checks do not fetch references, authenticate evidence, contact a merchant, change a feed, place orders or send telemetry. A match is not provider acceptance, live product truth, physical fit or compatibility. This is a selected local review contract, not a complete provider schema validator. Hold results are evidence decisions, not protocol failures.

Install the versioned bundle

Download commerce-evidence-toolkit-0.1.0.mcpb and SHA256SUMS from the v0.1.0 release. Check the archive against its published SHA-256 checksum. The bundle contains the server and production dependencies; Node.js 22 or later is required.

Use your compatible client's MCPB import flow, or extract the archive to a directory and configure the absolute path to its server/index.mjs using the JSON example below. MCPB support varies by client. Protocol tests do not establish certification by any desktop app.

A Node package archive is also included in the release. Installing that archive requires npm to install its dependencies. It has not been published to npm.

Run from source

Requires Node.js 22 or later and npm. Dependency installation uses the network; the three comparison operations run locally after installation.

sh
npm ci --ignore-scriptsnpm testnode server/index.mjs

The final command starts an MCP server over standard input/output. It waits for a compatible client; it is not a browser URL. Do not print debug messages to stdout, which carries the protocol.

For a compatible client that accepts an MCP JSON configuration, replace the path below with the absolute location of your checkout:

json
{  "mcpServers": {    "commerce-evidence": {      "command": "node",      "args": ["/absolute/path/agentic-commerce-field-guide/server/index.mjs"]    }  }}

Client configuration locations differ. This example declares the transport and executable; it does not claim every assistant automatically installs or invokes the server.

Try a complete input

The files in examples/ are complete tool arguments, not bare internal records. The three starter examples below are fictional and use frozen times where relevant.

ToolArguments fileExpected example result
compare_dimensionsexamples/dimensions.jsonmatch
compare_feed_snapshotsexamples/feed-snapshots.jsonupdate_needed
review_product_recordexamples/product-record.jsonclear after explicit mapping

Ask your client to call the named tool with that file's JSON object. Every successful response includes structured content with toolVersion, a canonical documentation URL and the full result. Each core result retains its own ruleset version and evidence limitations. Incomplete accepted inputs return holds; malformed envelopes and excessive requests return protocol tool errors. The wrapper caps serialized requests at 200,000 UTF-8 bytes and nesting at 25 levels; individual checks impose narrower limits.

Dimension values are positive decimal strings and explicit units (in, cm, mm, m); tolerance is a nonnegative decimal string in millimetres. Do not silently rename depth to length, treat diameter as two axes, or substitute package measurements. Product-record review covers selected positive USD fields; feed freshness is a selected current USD snapshot contract. References are caller assertions and are never fetched.

One observed comparison

examples/observed-dimensions.json contains the HOLMERUD 40541421 dimensions observed on public US and GB product pages for the September 24 study. It returns match at the declared 2 mm display threshold and mismatch at zero. Fractional inch displays are represented exactly as decimals. The tool does not fetch or authenticate the linked sources. This threshold is not a manufacturing or installation tolerance. The study retains eight complete comparisons and 22 unresolved listings; it is not an industry error-rate estimate.

Verify and package

sh
npm run verify:artifactsnpm testnode scripts/test-clean-install.mjsnpm run bundle

npm run bundle creates a local .mcpb archive with the production dependencies and a SHA-256 file under dist/. The Node package can be built with npm pack. A local package build is not an npm or MCP Registry publication.

The test suite compares all 40 fixture/method cases against their source rules (10 dimensions, 6 freshness, and 12 product records under 2 methods), checks error bounds and input immutability, and invokes all 40 over stdio with the TypeScript SDK client. The clean-install test installs the archive into a temporary directory and calls all three tools. A separate Python SDK client test calls all three examples and an incomplete-input hold. These are protocol tests with synthetic inputs, not independent users or desktop-app certification.

Evidence and scope

provenance.json records the source site commit, actual production download verification time, and SHA-256 for every file in artifacts/. The September 24 snapshot adds dimensions to the existing product-feed and measurement artifacts. Verification recomputes hashes and the earlier portability/freshness cases. Synthetic cases show rule behavior, not merchant error rates or model accuracy.

Primary tool documentation:

Please cite the relevant guide and this version or commit. CITATION.cff provides author metadata. To report a correction, open an issue with the tool version, a minimal non-sensitive input, expected result, actual result and supporting reference. Never post customer data or credentials.

Licensing

Original software, documentation, tests and fictional fixtures are available under the MIT License; see license scope. Third-party dependencies retain their own license notices in the packaged dependency directories. Linked specifications, source pages, images and trademarks are not relicensed by this repository.

來源:README.md,提交 787150d

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v0.1.0最新Sep 25, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分