Store Canary

Store Canary MCP connector

A free, hosted, read-only MCP server that checks a public WooCommerce store from the outside and answers in plain pass / warn / fail lines. No account, no API key, no install.

Connector address: https://mcp.storecanary.app/mcp (Streamable HTTP, no authentication)

Docs: https://storecanary.app/mcp

This repository only documents the hosted connector. It contains no server code.

Tools (all read-only)

Tool	What it checks
check_store	Overall health: homepage reachable, HTTPS valid and redirects sane, WooCommerce detected, /cart/ and /checkout/ load, payment markers visible on checkout.
check_ssl	Certificate accepted, http:// permanently redirects to https://, short HTTPS-only redirect chain, HSTS header set.
check_exposure	WordPress, WooCommerce, plugin and PHP versions shown publicly, a public /readme.html, a readable /wp-content/debug.log (log contents are never returned or kept).
check_seo_basics	robots.txt (and whether it blocks the whole site), the XML sitemap, homepage title and meta description, homepage noindex.
check_speed	Times one download each of the homepage, one product page and the cart (one sample per page, not a lab test).
check_products	Samples up to 10 published products from the public WooCommerce Store API for missing prices, missing images and out-of-stock items.
check_policies	Homepage links to privacy, terms, shipping and returns/refunds pages, and each linked page loads.
explain_finding	Explains any finding code (e.g. ssl_hsts, exposure_debug_log) in plain words, with a suggested fix. Makes no network requests.

Every tool takes a store url (except explain_finding, which takes a code). Checks use GET requests only: they never log in, add to cart or submit forms. Each runs once, when you ask; nothing is monitored or scheduled.

Starter prompts

• black_friday_audit — Audit my WooCommerce store before Black Friday. Runs all seven checks and turns them into a prioritized pre-sale fix list.
• checkout_check — Is my checkout working? Checks that the cart, checkout and payment methods load, and explains anything that doesn't.
• explain_finding — Explain this finding. Explains a Store Canary finding id with a suggested fix.

Setup

ChatGPT

Until Store Canary is in ChatGPT's app directory, enable developer mode and add a custom connector with the URL https://mcp.storecanary.app/mcp/chatgpt and no authentication.

Claude

Open Settings → Connectors → Add custom connector and paste https://mcp.storecanary.app/mcp.

Cursor

Add to your mcp.json:

{
  "mcpServers": {
    "store-canary": { "url": "https://mcp.storecanary.app/mcp" }
  }
}

Cline and other MCP clients

Add a remote server over Streamable HTTP at https://mcp.storecanary.app/mcp. No auth headers are needed. For clients that only speak stdio:

{
  "mcpServers": {
    "store-canary": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.storecanary.app/mcp"]
    }
  }
}

Then ask: "Check my store at example.com with Store Canary."

Limits and safety

• Up to 10 checks a minute per connection, plus a shared cap.
• About five GET requests per check, no cookies, done in under 10 seconds. Requests identify as StoreCanaryBot.
• Public web addresses only: no IP addresses, private networks or unusual ports.

Privacy

Store Canary does not store the store URLs you check, their results, or your IP address. See the privacy policy.

Support

Email [email protected] or visit https://storecanary.app/mcp.

Built by Form Nerd, LLC. Licensed under MIT.