Trader Information
Back to topOverview
Back to topminiOrange's Secure MCP Server for Magento 2 connects your Magento 2 or Adobe Commerce store to any MCP-compatible AI assistant Claude Desktop, Claude Code, Cursor, ChatGPT, Gemini, GitHub Copilot using the Model Context Protocol (MCP), the open standard for AI-to-application integration.
73 tools for querying orders, products, customers, inventory, invoices, shipments, CMS content, and promotions in natural language, authenticated through your existing Magento integration tokens.
Once installed, your AI client can query and act on live store data for eg: "show me pending orders from the last 7 days",
"find products named shirt with stock below 10",
"list invoices issued this month",
"which CMS blocks reference the summer sale".
No SQL, no GraphQL, no custom REST integration, no developer ticket.
What's Included -
The extension exposes 73 purpose-built abilities across three namespaces (run through 3 MCP tools: discover_abilities, get_ability_info, and execute_ability).
Admin tools (44) — real-time query and management access to -
- Sales — orders (search, get, hold, unhold, cancel, comments, email), invoices, shipments, tracking, credit memos (get), quotes, returns
- Catalog — products, product attributes, bulk catalog updates
- Inventory — default stock quantity and in-stock status, inventory search and update, bulk inventory updates
- Customers — customer accounts, customer groups, customer order history
- Marketing — cart price rules, coupon code generation
- Content — CMS pages
- Reviews — product reviews, moderation status
- Analytics — sales aggregates, product sales, order totals by period
- System — store views, store groups, websites
Storefront abilities (17) — browse and transact as a guest shopper, for QA, conversion auditing, and customer-experience analysis —
- Category tree and catalog search/product detail (including storefront media gallery)
- URL rewrite and route resolution
- Guest cart creation, line-item management, coupons, and totals
- Set shipping method and payment method on a guest cart
- Guest checkout flow simulation end to end
- Storefront store config and CMS policy pages
Workflow abilities (13) — multi-step operational summaries that compose the abilities above
- Store overview, daily store summary, sales summary, sales comparison
- Bestsellers, catalog analysis, products needing updates
- Low-stock, out-of-stock, and restock candidates
- Orders needing attention, investigate order, customer order summary
Security & Access Control -
- Magento-native auth. Use a Magento integration token, or OAuth mapped to a Magento admin user. Admin abilities inherit that token’s or user’s Magento ACL (Integrations API tab, or User Roles).
- Scope by Magento resources. Grant Catalog, Sales, Inventory, and so on. Same-resource abilities (for example get and update product) share one ACL check — there is no separate MCP permission grid.
- Storefront is not ACL-scoped. Guest cart/checkout need a valid token but skip Magento roles. Catalog browse abilities are public.
- Direct to your Magento MCP endpoint. Store data is not routed through miniOrange. License/account checks still use miniOrange. Optional agent logs stay in Magento.
- Revoke in Magento admin. Revoked, expired, or deleted tokens are rejected on the next execute_ability call. Write actions also require confirm=true.
Compatible Clients -
- Claude Desktop and Claude Code
- Cursor
- ChatGPT and other web-based MCP clients
- Google Gemini
- Any MCP-compatible tool or custom agent
Typical Use Cases -
- Operations — stock audits, abandoned cart review, order status sweeps, refund reconciliation
- Merchandising — bestseller analysis, price rule verification, catalog gap checks
- Development and QA — checkout flow regression testing, URL rewrite validation, CMS content audits
- Support — order lookup and customer history without admin grid navigation
Account & Pricing -
You do not need to create an account or register with miniOrange to use our free version.
Support -
24/7 at magentosupport@xecurify.com, or submit a query directly from the extension's configuration page in your Magento admin.
Technical Specifications
Back to topSeller profile
Seller contact
Current Version
3.0.0
Adobe Commerce platform compatibility
Adobe Commerce (cloud): 2.4 (current)
Adobe Commerce (on-prem): 2.4 (current)
Magento Open Source: 2.4 (current)
Type
Stable Build
Updated
02 September, 2026
Categories
Extensions, Reporting & Analytics
Documentation
License Type
GNU General Public License 3.0 (GPL-3.0)
Policy
Quality Report
Back to topAll tests were conducted on the latest versions of Adobe Commerce that existed for the compatible release lines at the moment of the extension submission. Latest versions of all other software were used, as applicable.
Release Notes
Back to top3.0.0:
- Compatible with Adobe Commerce (cloud) : 2.4
- Compatible with Adobe Commerce (on-prem) : 2.4
- Compatible with Magento Open Source : 2.4
- Stability: Stable Build
-
Description:
- Added OpenAI OAuth: Magento is the OAuth authorization server (Dynamic Client Registration, admin login, and token issue) and the MCP resource that accepts those tokens.
- OpenAI connection: ChatGPT connects with OAuth; Magento shows an admin consent screen, then issues a token so Magento credentials never leave the store.
- Added Tools Support : MCP now exposes three meta-tools only — discover_abilities, get_ability_info, and execute_ability — instead of listing every Magento operation as its own tool.
2.0.0:
- Compatible with Adobe Commerce (cloud) : 2.4
- Compatible with Adobe Commerce (on-prem) : 2.4
- Compatible with Magento Open Source : 2.4
- Stability: Stable Build
-
Description:
- Compatible with Magento 2.4.9
- Minor UI Fixes
-Latest Security Patch
1.0.0:
- Compatible with Adobe Commerce (cloud) : 2.4
- Compatible with Adobe Commerce (on-prem) : 2.4
- Compatible with Magento Open Source : 2.4
- Stability: Stable Build
-
Description:
- Initial Release
Support
Back to topThe best place to start if you need help with a specific extension is to contact the developer. All Adobe Commerce developers have both a contact email and a support email listed.
Contact Vendor