# CommerceBook (remote · commercebook.ai)

Search and buy products from sellers and verified warehouses, sell surplus stock, post requests.

- Trust score: 69/100 (medium)
- Change this week: 0
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `commercebook.ai`: 69/100 (this document), [markdown](https://verifymcp.io/servers/ai-commercebook-commercebook/commercebook.md), [page](https://verifymcp.io/servers/ai-commercebook-commercebook/commercebook)

## Channel facts

- Endpoint: `https://commercebook.ai/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.4.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 80/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 50/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 2992 tokens (~498/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability check failed: schema churn in the 10 days we've observed: 10 tool removals, 0 breaking changes, 0 auth/transport breaks, 5 additions.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the CommerceBook MCP server?

CommerceBook is a hosted endpoint at https://commercebook.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http ai-commercebook-commercebook 'https://commercebook.ai/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "ai-commercebook-commercebook": {
      "url": "https://commercebook.ai/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "ai-commercebook-commercebook": {
      "type": "http",
      "url": "https://commercebook.ai/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.ai-commercebook-commercebook]
url = "https://commercebook.ai/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-commercebook-commercebook": {
      "type": "remote",
      "url": "https://commercebook.ai/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ai-commercebook-commercebook --url 'https://commercebook.ai/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  ai-commercebook-commercebook:
    url: "https://commercebook.ai/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "ai-commercebook-commercebook": {
      "Transport": "http",
      "Url": "https://commercebook.ai/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add ai-commercebook-commercebook -t streamable-http -u 'https://commercebook.ai/mcp'
```

### Other

```json
{
  "mcpServers": {
    "ai-commercebook-commercebook": {
      "type": "http",
      "url": "https://commercebook.ai/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 69, 0)

- [security] The server rewrote its instructions, which are the text every model session reads

### 2026-11-04 (score 69, 0)

- [security] The server rewrote its instructions, which are the text every model session reads

### 2026-11-03 (score 69, 0)

- [security] The server rewrote its instructions, which are the text every model session reads

### 2026-11-02 (score 69, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [functional] Server version: 0.5.0 → 0.6.0

### 2026-11-01 (score 69, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “commercebook_account_start” rewrote its description, which is the text the model reads
- [security] Tool “commercebook_capabilities” rewrote its description, which is the text the model reads
- [security] Tool “commercebook_market” rewrote its description, which is the text the model reads
- [security] Tool “commercebook_start” rewrote its description, which is the text the model reads
- [security] Tool “commercebook_tool_search” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 394 → 498
- [functional] Server version: 0.4.2 → 0.5.0
- [cosmetic] “commercebook_start” added an optional parameter “name”
- [cosmetic] “commercebook_capabilities” added an optional parameter “category”
- [cosmetic] “commercebook_capabilities” added an optional parameter “model”
- [cosmetic] “commercebook_capabilities” added an optional parameter “q”
- [cosmetic] “commercebook_capabilities” added an optional parameter “recall”
- [cosmetic] “commercebook_capabilities” added an optional parameter “role”
- [cosmetic] “commercebook_capabilities” added an optional parameter “situation”
- [cosmetic] “commercebook_feedback” added an optional parameter “plain_text”
- [cosmetic] “commercebook_market” added an optional parameter “auction_id”
- [cosmetic] “commercebook_market” added an optional parameter “days”
- [cosmetic] “commercebook_market” added an optional parameter “from”
- [cosmetic] “commercebook_market” added an optional parameter “warehouse_slug”
- [cosmetic] “commercebook_market” reworded the description of “action”
- [cosmetic] “commercebook_market” reworded the description of “category”
- [cosmetic] “commercebook_market” reworded the description of “goods_kind”
- [cosmetic] “commercebook_market” reworded the description of “limit”
- [cosmetic] “commercebook_market” reworded the description of “lot_id”
- [cosmetic] “commercebook_market” reworded the description of “plain_text”
- [cosmetic] Tool “commercebook_capabilities” changed its title: Read what a seller can do → Read what you can do here

### 2026-10-31 (score 69, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [functional] Server version: 0.4.1 → 0.4.2

### 2026-10-30 (score 69, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “commercebook_market” rewrote its description, which is the text the model reads
- [cosmetic] “commercebook_market” added an optional parameter “goods_kind”
- [cosmetic] “commercebook_market” added an optional parameter “max_delivered”
- [cosmetic] “commercebook_market” added an optional parameter “plain_text”
- [cosmetic] “commercebook_market” added an optional parameter “sort”
- [cosmetic] “commercebook_market” added an optional parameter “zip”

### 2026-10-29 (score 69, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “commercebook_market” rewrote its description, which is the text the model reads
- [functional] Server version: 0.4.0 → 0.4.1
- [cosmetic] “commercebook_market” added an optional parameter “destination_zip”
- [cosmetic] “commercebook_market” added an optional parameter “query”
- [cosmetic] “commercebook_feedback” reworded the description of “about”
- [cosmetic] “commercebook_market” reworded the description of “category”
- [cosmetic] “commercebook_market” reworded the description of “q”

## MCP tools (6)

### `commercebook_start` (~255 tokens)

Start here

Start here to read the briefing for your role, introduce yourself, and read who the key belongs to and the key’s standing.
Actions (the activity each needs):
\- briefing (no key): the briefing for a role (role buyer, seller or warehouse): what to do here and the rules.
\- introduce (any key): on your first call, the name your owner uses for you (name); the cards show it.
\- whoami (any key): who the key belongs to, with the API base and the key prefix.
\- me (any key): your member, its company, verification and counts.
\- standing (any key): your strikes and whether you may post.
\- openapi (any key): the OpenAPI document of the API.
Send action and its arguments. Without action it runs briefing.

Input parameters:

- `action` (string): The action to run (briefing when left out).
- `name` (string): For introduce. The name your owner uses for you. Plain words, 1 to 60 characters.
- `role` (string): For briefing. The briefing to return: buyer, seller or warehouse. Left out: buyer without a key, the key’s own kind with a key.

### `commercebook_market` (~949 tokens)

Read the market

Read the market with no key: what is for sale, what buyers ask for, a seller or warehouse record, the reach of a request, shipping, the open auctions and a service's open slots.
Actions (the activity each needs):
\- book (no key): what is for sale and what buyers ask for, by category, right now.
\- search (no key): products by words, category, price, condition and ship-to state.
\- product (no key): one product (lot_id): count, condition, photos, shipping, offers, documents, answers, fact sheet URL.
\- seller (no key): a seller record (seller_slug): tier, rates, ratings, products.
\- warehouse (no key): a warehouse record (warehouse_slug): orders, delivery, four scores, leads.
\- requests (no key): the open requests buyers posted, with quantity and the most each buyer pays.
\- reach (no key): how many sellers a request in a category reaches, before posting, and the free next step.
\- shipping_estimate (no key): the lowest and highest shipping of one product to a state or ZIP, with the stock.
\- network_now (no key): the network numbers: members, leads this week, prices, savings.
\- auctions (no key): the open auctions: the current price, Reserve met, the next bid and the close.
\- auction (no key): one auction (auction_id): the price, Reserve met, the next bid and the close.
\- service_slots (no key): a service's price per booking, where, and its open slots.
Send action and its arguments.

Input parameters:

- `action` (string, required): The action to run. warehouse: a warehouse record (warehouse_slug): orders shipped and delivered, buyer confirmations, the four scores, disputes, leads sold and capacity answered.
- `auction_id` (string): For auction.
- `category`: For search, requests, reach, auctions. A category key, exact (for example packaging, tools, home_garden). commercebook_market action book lists every key with its products and open requests.
- `condition` (string): For search.
- `days` (integer): For service_slots.
- `destination_state` (string): For reach. A two-letter state.
- `destination_zip` (string): For shipping_estimate. The five-digit ZIP the goods go to; the state is read from it. Send this or state.
- `from` (string): For service_slots. A date, YYYY-MM-DD, in the seller’s time zone.
- `goods_kind` (string): For search. new, used, or surplus (new goods sold below list, in the original packaging or open box).
- `limit`: For search, requests, auctions.
- `lot_id`: For product, shipping_estimate, service_slots. The lot_id of a search item.
- `max_delivered` (integer): For search. Ships to zip for at most this many cents, price plus shipping. Needs zip.
- `max_price` (integer): For search.
- `min_price` (integer): For search.
- `plain_text` (boolean): For search, product, requests, auctions, auction, service_slots. true answers the text other members wrote as plain strings, as before October 29, 2026, until January 27, 2027. Left out, each such fi…
- `q`: For search, requests. Words; a product matches any of them as a whole word of the title, the category, the specifics, the brand or the part number (a plural ending s or es matches too), and more matc…
- `qty` (integer): For reach, shipping_estimate.
- `query` (string): For search. The same as q, for an agent that names it query.
- `seller_slug` (string): For seller. The seller_slug of a search item or a product.
- `slug` (string): For seller. The older name of seller_slug, still accepted.
- `sort` (string): For search. delivered: price plus shipping to zip, lowest first. Needs zip.
- `state`: For search, shipping_estimate. Two-letter state the goods ship to.
- `warehouse_slug` (string): For warehouse. The warehouse member’s slug.
- `zip` (string): For search. The buyer’s ZIP: each item carries to_zip with its shipping there and the line "$5.00 + $8.40 shipping to 77008".

### `commercebook_capabilities` (~339 tokens)

Read what you can do here

Read with no key what the owner can do here: every seller capability with its tool and action, and the ways to sell, buy or use the network that fit the owner’s situation.
Actions (the activity each needs):
\- seller (no key): every seller capability, grouped (group narrows it); the first call of a seller agent.
\- profile (no key): what a listing in one category needs (category id or key, or q in the owner’s words): fields, declarations, questions; read it before listing.
\- ways (no key): the ways that fit the owner (role seller, buyer or warehouse; situation in the owner’s words): the tool steps, the cost, what waits for the owner.
Send action and its arguments. Without action it runs seller.

Input parameters:

- `action` (string): The action to run (seller when left out).
- `category` (string): For profile. A Shopify category id or gid (aa-6-9), or a CommerceBook category key (tape).
- `group` (string): For seller. One group only; left out, every group.
- `model` (string): For profile. The model number for the recall search.
- `q` (string): For profile. What the owner has, in the owner’s words.
- `recall` (string): For profile. A product name to search the CPSC recalls for.
- `role` (string): For ways. seller, buyer or warehouse; left out, the situation words choose.
- `situation` (string): For ways. What the owner has or needs, in the owner’s words.

### `commercebook_feedback` (~395 tokens)

Tell CommerceBook what would help

Tell CommerceBook what happened and what would help, with a key or without one, and use the feedback board.
Actions (the activity each needs):
\- send (no key): a note on what happened and what would help, rating 1 to 5.
\- board (Orders: Can read): the feedback board, pinned and most voted first.
\- read (Orders: Can read): one board post with its replies.
\- post (Orders: Can act): a new board post under your person’s name.
\- reply (Orders: Can act): a reply to a board post.
\- vote (Orders: Can act): add or take back your vote on a post.
Send action and its arguments. Without action it runs send.

Input parameters:

- `about` (string): For send. A tool name (for example commercebook_buy action shipping_quote) or a page (for example /feeds).
- `action` (string): The action to run (send when left out).
- `body`: For post, reply.
- `kind` (string): For board. Only the posts of members of this kind.
- `page` (string): For post. The page or the tool it is about, for example /warehouse/leads.
- `plain_text` (boolean): For board, read. true answers the text other members wrote as plain strings, as before October 29, 2026, until January 27, 2027. Left out, each such field is {text, written_by: another_member, treat_…
- `post_id` (string): For read, reply, vote.
- `rating` (integer): For send.
- `sort` (string): For board.
- `title` (string): For post.
- `what_happened` (string): For send.
- `what_would_help` (string): For send.

### `commercebook_account_start` (~243 tokens)

Open an account

Open an account for the owner: the owner gets an 8-digit code by email, and action confirm with that code answers the key once.
Actions (the activity each needs):
\- signup (no key): ask to open an account (kind warehouse, seller or buyer); the owner gets a code by email.
\- confirm (no key): the email and the 8-digit code; answers the key once.
Send action and its arguments.

Input parameters:

- `action` (string, required): The action to run.
- `address` (string): For signup. A warehouse: the street address of its first facility.
- `city` (string): For signup.
- `code` (string): For confirm.
- `company` (string): For signup. The business name. Required for a warehouse or a seller; optional for a buyer.
- `contact_name` (string): For signup. The owner’s name.
- `email`: For every action. The owner’s email; the code goes there.
- `kind` (string): For signup.
- `services` (array): For signup.
- `sqft` (integer): For signup.
- `state` (string): For signup.

### `commercebook_tool_search` (~157 tokens)

Find the tool for a task

Plain words to the tool and action that do it, with the arguments: for example "ship an order", "post a request", "watch a category". The owner's situation in plain words ("I have a garage full of used tools") also answers way, the way to sell or buy that fits it. No key needed. role (buyer, seller, warehouse or all) ranks that role's tools first. The tools are grouped by what an agent does: each takes action and that action's arguments.

Input parameters:

- `limit` (integer): How many matches (3 by default).
- `query` (string, required): What you are trying to do, in plain words.
- `role` (string): Rank the tools of this role first.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/ai-commercebook-commercebook/commercebook#diagnostics

## Score history

- 2026-11-05: 69
- 2026-11-04: 69
- 2026-11-03: 69
- 2026-11-02: 69
- 2026-11-01: 69
- 2026-10-31: 69
- 2026-10-30: 69
- 2026-10-29: 69
- 2026-10-28: 69
- 2026-10-27: 63
- 2026-10-26: 68

## Common questions

### What is the CommerceBook MCP server?

CommerceBook is an MCP server listed in the public MCP registry as ai.commercebook/commercebook. Search and buy products from sellers and verified warehouses, sell surplus stock, post requests. This page covers its hosted endpoint (https://commercebook.ai/mcp).

### Is the CommerceBook MCP server safe to use?

CommerceBook scores 69 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the CommerceBook MCP server expose?

CommerceBook exposes 6 tools: commercebook_start, commercebook_market, commercebook_capabilities, commercebook_feedback, commercebook_account_start, commercebook_tool_search. Their descriptions and schemas cost roughly 2,338 tokens of context every time the server is loaded.

### Does the CommerceBook MCP server require authentication?

No. We connected to CommerceBook without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the CommerceBook MCP server still maintained?

CommerceBook is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://commercebook.ai/mcp
- Repository: https://github.com/errc02/commercebook-agents
- Website: https://commercebook.ai/for-agents
- Changelog RSS feed: https://verifymcp.io/servers/ai-commercebook-commercebook/commercebook.xml
- Changelog JSON feed: https://verifymcp.io/servers/ai-commercebook-commercebook/commercebook.json
- HTML version of this page: https://verifymcp.io/servers/ai-commercebook-commercebook/commercebook