Receiz-commerceBLOCK
Open-source, no-code ecommerce launcher and developer kernel for proof-native artifacts. Clone, configure, and launch your own storefront powered by the Receiz SDK, MCP server, offline verification, ownership receipts, and programmable commerce objects.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/kojibai/Receiz-commerce/actions/workflows/ci.yml)
Receiz Commerce Kit is a commerce application and a forkable SDK kernel for building proof-sealed applications with @receiz/sdk, Receiz MCP and Receiz AI skills.
Current release: 5.4.0 · SDK target: @receiz/[email protected] · ruleset: 127.0.0
It ships as a Next.js App Router application with a public storefront, customer account area, no-code merchant admin, Receiz ID, checkout, wallet projection, rewards, Receized assets, domain hosting, media upload, proof memory, publish recovery, webhook verification, release diagnostics, and an AI operator layer built around Receiz MCP, Twin, World, and SDK doctor workflows. You can run it as the Receiz.app Commerce Cloud product, or clone it and build your own commerce, rewards, marketplace, game, content, or agent-operated SaaS on top of the same primitives.
The core verb is seal. Products, orders, rewards, assets, storefront state, and customer actions can carry Receiz proof instead of depending on a private app database as the final authority.
Live Conformance
91912371e83dOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add receiz-commerce-kit --env NEXT_PUBLIC_AUTH_MODE=${NEXT_PUBLIC_AUTH_MODE} --env RECEIZ_ACCESS_TOKEN=${RECEIZ_ACCESS_TOKEN} --env RECEIZ_CLIENT_SECRET=${RECEIZ_CLIENT_SECRET} --env RECEIZ_CONNECT_ACCESS_TOKEN=${RECEIZ_CONNECT_ACCESS_TOKEN} -- npx -y [email protected]{
"mcpServers": {
"receiz-commerce-kit": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"NEXT_PUBLIC_AUTH_MODE": "${NEXT_PUBLIC_AUTH_MODE}",
"RECEIZ_ACCESS_TOKEN": "${RECEIZ_ACCESS_TOKEN}",
"RECEIZ_CLIENT_SECRET": "${RECEIZ_CLIENT_SECRET}",
"RECEIZ_CONNECT_ACCESS_TOKEN": "${RECEIZ_CONNECT_ACCESS_TOKEN}"
}
}
}
}Exposed tools (4)
4 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
Admin | read | Open the no-code commerce console. |
Blog | read | Open the brand blog and proof content. |
Products | read | Open the public product catalog. |
Receiz.app | read | Installable proof-sealed commerce, rewards, checkout, domains, and admin studio powered by Receiz. |
Trust audit
BLOCKgrade F · trust 34/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | FAIL |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- declared (7 observation(s))
- Shell
- declared (5 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
Cash Send does not require username, Receiz ID, PBI, account, session, server,
publish-payload-media.ts
- Never read a player token from environment variables.
ability-grove.wav
ability-spark.wav
ability-stone.wav
ability-tide.wav
boss-telegraph.wav
console.log(`Secret scan passed (${files.length} tracked files scanned).`);return <group name={`entrance-beacon-${landmark.id}`}>"settlement-distress": { moduleId: "rescue-stations", title: "Wayfinder Rescue", instruction: "Signal the lost party, guide them home, then rebuild the edge beacon.", steps: [["signal", "Signal", "Ansconst secret = "test-only-monthly-payment-coordinate-secret";
const secret = "test-only-native-product-delivery-secret-12345";
await assert.rejects(openProductDeliverySource({ receiz, binding, source, secret: "another-secret-with-at-least-32-characters" }), /delivery_source_invalid/);const secret = "test-only-store-order-recovery-coordinate-secret";
const secret = "test-continuation-secret-32-characters-long";
.vercelignore
publish-payload-media.test.ts
const consumerImport = new Function("specifier", "return import(specifier)") as (specifier: string) => Promise<unknown>;const load = new Function("return import(process.cwd() + '/scripts/receiz-v128-inspection.mjs')") as () => Promise<{reviewPublishedInventoryFindings: (findings: unknown[], root?: string) => {reviewed:const load = new Function("return import(process.cwd() + '/scripts/receiz-v128-inspection.mjs')") as () => Promise<{reviewPublishedInventoryActions: (actions: unknown[], root?: string) => {reviewed: uconst load=new Function("return import('@receiz/sdk/offline')") as () => Promise<{verifyReceizOfflineSealedFile: (input:{bytes:Uint8Array;filename:string})=>Promise<{ok:boolean}>}>;import { receizProjectAdapter } from "../../../../receiz/receiz.adapter";import hearttreeManifest from "../../../../public/audio/wilds/hearttree/manifest.json" with { type: "json" };import { safeGetLocalStorage } from "../../lib/storage/browser-storage";Gates applied: critical_finding, no_behavioural_pass, undeclared_transfer.
91912371e83dfull audit observations/trust-audit/mcp-server/kojibai__receiz-commerce.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 91912371e83d | BLOCK | F | 34 | first audit |
Questions
What is the Receiz-commerce MCP server?
Open-source, no-code ecommerce launcher and developer kernel for proof-native artifacts. Clone, configure, and launch your own storefront powered by the Receiz SDK, MCP server, offline verification, ownership receipts, and programmable commerce objects.
What tools does Receiz-commerce expose?
4 in total: 4 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Receiz-commerce safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (34/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Receiz-commerce need?
It reads NEXT_PUBLIC_AUTH_MODE, RECEIZ_ACCESS_TOKEN, RECEIZ_CLIENT_SECRET, RECEIZ_CONNECT_ACCESS_TOKEN, RECEIZ_OAUTH_STATE_SECRET, RECEIZ_WEBHOOK_IDEMPOTENCY_KEY, RECEIZ_WEBHOOK_SECRET, VERCEL_API_TOKEN, VERCEL_TOKEN and WILDS_PULSE_TICK_SECRET from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (91912371e83d), read on 2026-10-11. The repository is watched and re-audited when it changes.