@taurgis/sfcc-dev-mcp
AMCP server package sfcc-dev-mcp
Install
agr install @taurgis/sfcc-dev-mcp --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "sfcc-dev-mcp", "version": "1.1.0", "description": "MCP server for Salesforce B2C Commerce Cloud development assistance including logs, debugging, and development tools", "mcpName": "io.github.taurgis/sfcc-dev-mcp", "main": "dist/index.js", "bin": { "sfcc-dev-mcp": "./dist/main.js" }, "files": [ "dist/**/", "README.md", "LICENSE", "CHANGELOG.md" ], "repository": { "type": "git", "url": "git+https://github.com/taurgis/sfcc-dev-mcp.git" }, "homepage": "https://github.com/taurgis/sfcc-dev-mcp#readme", "bugs": { "url": "https://github.com/taurgis/sfcc-dev-mcp/issues" }, "scripts": { "build": "rm -rf ./dist && tsc && cp -r ./docs ./dist/docs && cp -r ./ai-instructions ./dist/ai-instructions", "start": "node dist/main.js", "dev": "tsx src/main.ts", "inspector": "npx @modelcontextprotocol/inspector node dist/main.js", "changeset": "changeset", "convert-docs": "node scripts/convert-docs.js", "convert-docs:test": "node scripts/convert-docs.js --test", "convert-docs:limit": "node scripts/convert-docs.js --limit 5", "github-pages": "cd docs-site && rm -f Gemfile.lock && bundle install --path vendor/bundle && bundle exec jekyll serve --livereload --host=0.0.0.0", "docs:install": "npm --prefix docs-site-v2 install", "docs:dev": "npm --prefix docs-site-v2 run dev", "docs:build": "npm --prefix docs-site-v2 run build", "docs:preview": "npm --prefix docs-site-v2 run preview", "release:status": "node scripts/release-status.js", "version-packages": "changeset version && node scripts/sync-server-json-version.js && npm install --package-lock-only", "ci:publish": "changeset publish", "test": "npm run test:all", "test:unit": "jest", "test:watch": "jest --watch", "test:coverage": "jest --coverage", "test:mcp:yaml": "aegis 'tests/mcp/yaml/.docs-only.test.mcp.yml' --config './aegis.config.docs-only.json'", "test:mcp:yaml:full": "aegis 'tests/mcp/yaml/.full-mode.test.mcp.yml' --config './aegis.config.with-dw.json'", "test:mcp:node": "node --test tests/mcp/node/.programmatic.test.js", "test:mcp:all": "npm run test:mcp:yaml & p1=$!; npm run test:mcp:yaml:full & p2=$!; wait $p1; s1=$?; wait $p2; s2=$?; [ $s1 -eq 0 ] && [ $s2 -eq 0 ] && npm run test:mcp:node", "test:mcp:ci": "npm run test:mcp:yaml -- --json && npm run test:mcp:yaml:full -- --json && npm run test:mcp:node", "test:mcp:published-npx": "bash ./scripts/test-published-npx.sh", "test:all": "npm run test:unit & p1=$!; npm run test:mock-server:setup & p2=$!; wait $p1; s1=$?; wait $p2; s2=$?; [ $s1 -eq 0 ] && [ $s2 -eq 0 ] && npm run test:mcp:all", "test:mock-server:setup": "cd tests/servers/sfcc-mock-server && npm install && npm run setup", "test:mock-server:start": "cd tests/servers/sfcc-mock-server && npm start", "test:mock-server": "jest --testPathPatterns=sfcc-mock-server", "validate:server-json": "node scripts/validate-server-json.js", "validate:tools-sync": "node scripts/validate-tools-sync.js", "validate:skills-sync": "node scripts/validate-skills-sync.js", "lint": "eslint .", "lint:fix": "eslint . --fix", "lint:check": "eslint . --max-warnings 0", "prepublishOnly": "npm run build", "prepare": "husky" }, "keywords": [ "mcp", "salesforce", "commerce-cloud", "sfcc", "development", "logs", "debugging", "webdav" ], "author": "Thomas Theunen thomas.theunen@forward.eu", "license": "MIT", "engines": { "node": ">=18", "npm": ">=8" }, "type": "module", "dependencies": { "@modelcontextprotocol/sdk": "1.29.0", "webdav": "5.9.0" }, "overrides": { "minimatch": "10.2.5" }, "devDependencies": { "@changesets/cli": "2.30.0", "@eslint/js": "10.0.1", "@types/eslint": "9.6.1", "@types/jest": "30.0.0", "@types/node": "25.5.2", "ajv": "8.18.0", "ajv-formats": "3.0.1", "eslint": "10.2.0", "husky": "9.1.7", "jest": "30.3.0", "mcp-aegis": "1.0.18", "ts-jest": "29.4.9", "tsx": "4.21.0", "typescript": "6.0.2", "typescript-eslint": "8.58.1" } }
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-b47972d8557b2026-08-06