What it can do: io.github.TonyWang-hub/mcp-cn-commerce

MCP server · TonyWang-hub

What io.github.TonyWang-hub/mcp-cn-commerce declares, asks for and runs, according to the marketplaces we read. Runs on your machine: the AI tool starts this PyPI package locally: mcp-cn-commerce. Environment variables it asks for: 25, secrets among them: 23. As of our marketplace pass on 2026-10-24.

This is not a security audit. We list what the marketplaces publish about this plugin: what it declares, what it asks for and what it runs. We do not run or inspect its code, and a verified mark is the marketplace's statement, not ours.

Where it runs

Runs on your machine: the AI tool starts this PyPI package locally: mcp-cn-commerceAs declared on: Official MCP Registry, PyPI (MCP servers).

What it declares

None of the marketplaces we read publishes a list of tools for it.

Prompts and resources: the marketplaces we read do not publish them.

What it asks for

Environment variables it asks for: 25, secrets among them: 23. As declared on: Official MCP Registry.

DOUDIAN_ACCESS_TOKEN secret
DOUDIAN_APP_KEY secret
DOUDIAN_APP_SECRET secret
DOUDIAN_SHOP_ID
JD_ACCESS_TOKEN secret
JD_APP_KEY secret
JD_APP_SECRET secret
KUAISHOU_ACCESS_TOKEN secret
KUAISHOU_APP_KEY secret
KUAISHOU_APP_SECRET secret
KUAISHOU_SIGN_SECRET secret
OCEANENGINE_ACCESS_TOKEN secret

Show the remaining 13

PINDUODUO_ACCESS_TOKEN secret
PINDUODUO_CLIENT_ID secret
PINDUODUO_CLIENT_SECRET secret
TAOBAO_ACCESS_TOKEN secret
TAOBAO_APP_KEY secret
TAOBAO_APP_SECRET secret
WX_ACCESS_TOKEN secret
WX_APP_ID secret
WX_APP_SECRET secret
WX_TOKEN_MODE
XHS_ACCESS_TOKEN secret
XHS_CLIENT_ID secret
XHS_CLIENT_SECRET secret

Names only: we keep no values, examples or descriptions of these variables. OAuth scopes and install-time settings are not published by the marketplaces we read.

What it runs besides MCP

None of the marketplaces we read lists hooks, commands, agents or language servers for it.

Who answers for it

TonyWang-hub

No marketplace we read marks it or its publisher as verified.
License: MIT.
Last change we saw: 2026-10-23.
The repository github.com/tonywang-hub/mcp-cn-commerce belongs to the account the publisher is listed under on Official MCP Registry.

How it has changed

Its tools, settings, hooks and composition have not changed since we started watching it.

In context

Median number of secrets an MCP server asks for on the marketplaces we read: 0.0. This one asks for: 23.
Share of MCP servers that run on a remote server: 64%.

Where it is published and how its figures have moved

Compare it side by side with similar plugins

Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Package data comes from the Python Package Index (pypi.org). Figures come from our own regular passes over the marketplaces, last read on 2026-10-24. We publish no contact details for plugin publishers.