StoreAgent MCP：把商店 MCP 服务器放在网关而非站点

Josh Kohlbach @jkohlbach原推发布于 2026.10.16

在 X 上打开原推

The safest place for your store's MCP server is not on your store When we built StoreAgent MCP, we decided early that the store would never run the MCP server itself It runs on our gateway instead. Claude or ChatGPT connect with OAuth (tokens last an hour or less), read-only is the default, there's a limit of about 60 calls a minute, and a kill switch if anything gets weird The usual way to do this is the other way round. The MCP server sits on the store and logs in with an application password... so every agent call is a PHP request on your production site, and nothing built in stops a runaway loop An agent stuck in a loop sends a lot of requests. I'd rather those hit our gateway than your checkout Try it free: search "StoreAgent" on http://wordpress.org