04 · Agent access · Open source
MCP Checkout Tools for Magento 2
angeo/module-mcp-checkout
Adds guest cart and checkout tools to the MCP server, so an agent can go from discovery to a placed order in one conversation: create_cart, add_to_cart, get_cart, get_shipping_methods, set_shipping_information, place_order.
Free and MIT-licensed. No licence key, no account, no telemetry.
What it does
Four things worth knowing before you install.
Six tools, one complete flow
create_cart, add_to_cart, get_cart, get_shipping_methods, set_shipping_information, place_order. Discovery to order without the agent ever touching your storefront HTML.
Guardrails on the server, not in the prompt
Constraints are enforced in Magento, where they cannot be talked around. A model that misunderstands an instruction still cannot exceed what the server permits — which is the only place a limit is real.
Guest checkout by design
No customer account, no stored credentials for an agent to leak. The blast radius of an agent session is one guest cart.
Magento’s own rules apply
Prices, stock, tax and shipping resolve through Magento. An agent order obeys the same rules as a human one because it is the same code path.
This module lets an AI agent place real orders. That is the point, and it is also the reason to read the code and exercise it on staging first. Server-side guardrails are the safety mechanism — configure them deliberately rather than accepting defaults because they were there.
Requirements
| Requires | angeo/module-mcp-server |
| Magento | Open Source / Adobe Commerce 2.4.x |
| PHP | 8.2+ |
| Checkout mode | Guest |
| Licence | MIT |
Questions
Can an AI agent really place a live order?
Yes — that is what the six tools do. Which is exactly why the guardrails are enforced in Magento rather than requested in a prompt, and why you should exercise the flow on staging before enabling it in production.
What stops an agent buying a thousand units?
Server-side limits, enforced in Magento. Prompt-level constraints are advisory; server-level ones are not. Configure them before going live.
Is this the same as ACP Instant Checkout?
No. Instant Checkout is OpenAI’s protocol flow for purchases inside ChatGPT. MCP checkout is a tool surface any MCP client can drive. Different clients, different protocols, both worth having.
Why guest checkout rather than customer accounts?
So there are no stored credentials for an agent session to compromise. The exposure of a compromised session is one cart.
Works with
Each module is independent, but these three are the ones most often installed alongside it.
Not sure whether you need this one?
Run the free scanner on your domain, or install the CLI audit. Both report which signals your store currently fails, so you install only what closes a real gap.