Store Canary MCP connector

A free, hosted, read-only MCP server that checks a public WooCommerce store from the outside and answers in plain pass / warn / fail lines. No account, no API key, no install.

Connector address: https://mcp.storecanary.app/mcp (Streamable HTTP, no authentication)

Docs: https://storecanary.app/mcp

This repository only documents the hosted connector. It contains no server code.

Tools (all read-only)

Tool	What it checks
`check_store`	Overall health: homepage reachable, HTTPS valid and redirects sane, WooCommerce detected, `/cart/` and `/checkout/` load, payment markers visible on checkout.
`check_ssl`	Certificate accepted, `http://` permanently redirects to `https://`, short HTTPS-only redirect chain, HSTS header set.
`check_exposure`	WordPress, WooCommerce, plugin and PHP versions shown publicly, a public `/readme.html`, a readable `/wp-content/debug.log` (log contents are never returned or kept).
`check_seo_basics`	`robots.txt` (and whether it blocks the whole site), the XML sitemap, homepage title and meta description, homepage `noindex`.
`check_speed`	Times one download each of the homepage, one product page and the cart (one sample per page, not a lab test).
`check_products`	Samples up to 10 published products from the public WooCommerce Store API for missing prices, missing images and out-of-stock items.
`check_policies`	Homepage links to privacy, terms, shipping and returns/refunds pages, and each linked page loads.
`explain_finding`	Explains any finding code (e.g. `ssl_hsts`, `exposure_debug_log`) in plain words, with a suggested fix. Makes no network requests.

Every tool takes a store url (except explain_finding, which takes a code). Checks use GET requests only: they never log in, add to cart or submit forms. Each runs once, when you ask; nothing is monitored or scheduled.

Starter prompts

black_friday_audit — Audit my WooCommerce store before Black Friday. Runs all seven checks and turns them into a prioritized pre-sale fix list.
checkout_check — Is my checkout working? Checks that the cart, checkout and payment methods load, and explains anything that doesn't.
explain_finding — Explain this finding. Explains a Store Canary finding id with a suggested fix.

Setup

ChatGPT

Until Store Canary is in ChatGPT's app directory, enable developer mode and add a custom connector with the URL https://mcp.storecanary.app/mcp/chatgpt and no authentication.

Claude

Open Settings → Connectors → Add custom connector and paste https://mcp.storecanary.app/mcp.

Cursor

Add to your mcp.json:

{
  "mcpServers": {
    "store-canary": { "url": "https://mcp.storecanary.app/mcp" }
  }
}

Cline and other MCP clients

Add a remote server over Streamable HTTP at https://mcp.storecanary.app/mcp. No auth headers are needed. For clients that only speak stdio:

{
  "mcpServers": {
    "store-canary": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.storecanary.app/mcp"]
    }
  }
}

Then ask: "Check my store at example.com with Store Canary."

Limits and safety

Up to 10 checks a minute per connection, plus a shared cap.
About five GET requests per check, no cookies, done in under 10 seconds. Requests identify as StoreCanaryBot.
Public web addresses only: no IP addresses, private networks or unusual ports.

Privacy

Store Canary does not store the store URLs you check, their results, or your IP address. See the privacy policy.

Support

Email [email protected] or visit https://storecanary.app/mcp.

Built by Form Nerd, LLC. Licensed under MIT.

Store Canary MCP connector