{ "data": { "a": { "slug": "adobe-commerce", "name": "Adobe Commerce (Magento)", "vendor": "Adobe Inc.", "vendorUrl": "https://business.adobe.com/products/commerce.html", "kind": "http-api", "category": "commerce", "summary": "Commerce platform from Adobe, built on the open-source Magento core. It runs as Adobe Commerce as a Cloud Service, on Adobe's cloud infrastructure or on the merchant's own servers, and agents reach a store through its REST and GraphQL APIs.", "url": "https://www.anchorterminal.com/tools/adobe-commerce", "markdownUrl": "https://www.anchorterminal.com/tools/adobe-commerce.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/adobe-commerce.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/adobe-commerce.json", "repo": "https://github.com/magento/magento2", "license": "Proprietary for Adobe Commerce under Adobe's General Terms and product-specific licensing terms. The Magento Open Source core is OSL 3.0", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "@adobe/aio-commerce-sdk" } ], "auth": "mixed", "authNotes": "Access comes from the merchant, with no Adobe review of the caller. On Adobe Commerce as a Cloud Service an organisation admin creates an OAuth credential in Adobe Developer Console, and calls carry an Adobe IMS bearer token, from client credentials with the `commerce.accs` scope or from a user flow tied to an Admin role. On Adobe Commerce on Cloud, on-premises and Magento Open Source, the merchant creates an integration limited to chosen ACL resources and requests are signed by OAuth 1.0a. Admin tokens last 4 hours and customer tokens 1 hour by default, and a bare integration token as a bearer token is off by default.", "pricing": "freemium", "pricingNotes": "No price was read. business.adobe.com timed out on every request on 8 October 2026, and the cloud service licensing terms define an account as one opened under a sales order. No sandbox or trial open without a contract was found in the pages we could read. Magento Open Source, the core with the same REST and GraphQL framework, is free under OSL 3.0, so an owner can start on a self-hosted store with no contract. Its Composer install needs keys from a Commerce Marketplace account.", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the web API docs or the Swagger and GraphQL schemas (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 12198, "npmWeekly": 1317, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://developer.adobe.com/commerce/webapi/", "openapi": "https://github.com/AdobeDocs/commerce-webapi/tree/main/src/openapi", "capabilities": [ "commerce.products", "commerce.orders", "commerce.cart", "commerce.checkout", "commerce.headless" ], "tags": [ "hosted", "self-hosted", "enterprise", "open-source", "openapi", "graphql", "oauth", "php", "sales-led", "status-page", "bug-bounty", "b2b" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 63.9, "grade": "B", "agentReady": false, "rank": 290, "ranked": true, "rankOf": 722, "categoryRank": 9, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 75, "payments": 30, "reliability": 55, "schema": 82, "security": 60, "transparency": 90 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "Public Swagger files cover 510 REST operations for the cloud service, the GraphQL schema carries cart, checkout and order mutations, and the cloud service authenticates by OAuth 2 through Adobe IMS. No request rate limit or idempotency key was found in the API documentation, Adobe publishes no MCP server for Commerce, and a licence starts with a sales order.", "bestFor": "An agent working for a merchant already on Adobe Commerce or Magento, for catalogue, order and B2B back-office work over REST and for carts and checkout over GraphQL.", "strengths": [ "Swagger 2.0 files for the cloud service (510 operations) and for releases 2.4.6 to 2.4.9 sit in the public docs repository", "The cloud service takes OAuth 2 client credentials or user tokens from Adobe IMS, and older bearer integration tokens are off by default on 2.4 stores", "`?fields=` trims any REST response, and `searchCriteria` filters, sorts and pages every list endpoint", "Cloud service release notes list four production releases between August and 7 October 2026, each naming new endpoints", "A lifecycle policy gives end-of-support dates for every 2.4 release line, and the sub-processor list was updated on 28 September 2026" ], "weaknesses": [ "No request rate limit for the REST or GraphQL APIs was found in the reviewed documentation, and 429 handling appears only in a code sample", "No idempotency keys were found, so a retried POST can create a second order or cart item", "status.adobe.com lists three Commerce incidents marked major in September 2026, two of them longer than an hour", "The cloud service drops the customer and guest REST APIs, so shopping flows there go through GraphQL only", "No Adobe MCP server for Commerce was found, and the only official client library is a JavaScript package for App Builder" ], "agentNotes": [ "Ask which deployment the store is. The cloud service answers at `https://\u003cserver\u003e.api.commerce.adobe.com/\u003ctenant-id\u003e/` with no `/rest` prefix, and other stores at `https://\u003chost\u003e/rest/\u003cstore-view-code\u003e/`", "On the cloud service, request an IMS token with the `commerce.accs` scope and send the `Store` header to pick the store view", "On a 2.4 store, sign requests with all four integration credentials by OAuth 1.0a. A bare integration token is refused unless the merchant has switched that on", "Add `?fields=` to REST calls and set `searchCriteria[pageSize]`. Stores with input limits on cap a page at 300 items", "Don't retry `placeOrder` or a POST blindly. Read the cart or order back first, because no idempotency key was found" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.9 } ], "editorialScores": { "ergonomics": 67, "maintenance": 75, "payments": 30, "reliability": 55, "schema": 82, "security": 60, "transparency": 80 }, "provenanceScore": 99 }, "connect": { "http": "curl --location 'https://\u003cserver\u003e.api.commerce.adobe.com/\u003ctenant-id\u003e/\u003cendpoint\u003e' \\\n --header 'Authorization: Bearer \u003ctoken\u003e' \\\n --header 'Content-Type: application/json' \\\n --header 'Store: \u003call | default | \u003cstore_view_code\u003e\u003e'" }, "letme": { "capability": "https://letme.dev/commerce.products", "tool": "https://letme.dev/adobe-commerce" }, "sameCompany": [ "adobe-firefly", "adobe-pdf-extract", "adobe-photoshop-api" ], "area": "business", "unitPrices": [ { "item": "Magento Open Source", "unit": "month", "usd": 0, "note": "OSL 3.0 core, you pay for your own hosting. Adobe Commerce prices weren't read" } ], "provenance": { "legalEntity": "Adobe Inc.", "domain": "adobe.com", "domainRegistered": "1986-11-17", "endpointOnVendorDomain": true, "terms": "https://www.adobe.com/cc-shared/assets/pdf/legal/terms/enterprise/pdfs/generalterms-na-2025v1.pdf", "privacy": "https://www.adobe.com/privacy/policy.html", "statusPage": "https://status.adobe.com", "changelog": "https://experienceleague.adobe.com/en/docs/commerce/cloud-service/release-notes", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The privacy policy, last updated 24 October 2025, names Adobe Inc. as controller in the US, Adobe KK in Japan and Adobe Systems Software Ireland Limited elsewhere.", "The terms link is Adobe's General Terms 2025v1, effective 3 October 2025, as given on the enterprise licensing page. We read that page and the product-specific terms for Adobe Commerce as a Cloud Service (2025v1, 13 October 2025), not the General Terms PDF itself.", "Separate product-specific terms cover Adobe Commerce on Cloud (18 February 2025), on Managed Services (18 March 2025) and on-premise software (9 January 2023).", "The privacy policy says Adobe is the processor for enterprise products and that it doesn't apply to data enterprise customers collect. A data processing addendum is published at www.adobe.com/cc-shared/assets/pdf/legal/terms/enterprise/pdfs/dpa-ww.pdf.", "Cloud service endpoints are on api.commerce.adobe.com. Stores on Adobe Commerce on Cloud, on-premises and Magento Open Source answer on the merchant's own domain.", "security.txt at www.adobe.com is PGP-signed, expires 30 July 2027 and names an Intigriti programme and psirt@adobe.com.", "www.adobe.com and helpx.adobe.com answered curl with 403. The legal pages were read through WebFetch, and the helpx security bulletins weren't read at all.", "Verisign RDAP gives a registration date of 1986-11-17 for adobe.com." ], "score": 99 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/adobe-commerce.json", "live": { "slug": "adobe-commerce", "vendorStatus": { "page": "https://status.adobe.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-08T19:38:11.618214553Z" }, "updatedAt": "2026-10-08T19:38:11.618214553Z" } }, "answer": "Shopware scores 71.4 (BB) on agent readiness against Adobe Commerce (Magento)'s 63.9 (B), and leads in 6 of 7 scored categories. Adobe Commerce (Magento) leads on transparency \u0026 trust.", "b": { "slug": "shopware", "name": "Shopware", "vendor": "shopware AG", "vendorUrl": "https://www.shopware.com", "kind": "http-api", "category": "commerce", "summary": "Open-source commerce platform from shopware AG in Germany, written in PHP on Symfony. Agents reach a store through its Store API for shopping, its Admin API for back-office work, and a built-in MCP server on both.", "url": "https://www.anchorterminal.com/tools/shopware", "markdownUrl": "https://www.anchorterminal.com/tools/shopware.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/shopware.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/shopware.json", "repo": "https://github.com/shopware/shopware", "license": "MIT for the Community Edition core. Paid plans add proprietary extensions under shopware AG's general terms", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "packagist", "name": "shopware/core" }, { "registry": "npm", "name": "@shopware/api-client" } ], "auth": "mixed", "authNotes": "Access comes from the merchant who runs the store, with no vendor review. The Admin API takes an OAuth 2.0 bearer token from /api/oauth/token, normally by client credentials from an integration created in Settings or with `bin/console integration:create`, and tokens last 10 minutes by default. An integration gets an ACL role, or full access with --admin. The MCP endpoint at /api/_mcp also accepts the integration's `sw-access-key` and `sw-secret-access-key` headers, and each integration and user has an MCP allowlist. The Store API takes the sales channel's `sw-access-key`, which is public in a headless shop, plus an `sw-context-token` for the cart and customer session.", "pricing": "freemium", "pricingNotes": "The Community Edition is free under MIT with no account, so an agent's owner can start with `shopware-cli project create` and Docker, with no contract (the docs say no Shopware account is needed to install or run a store). Paid plans start at €600 a month for Rise and €2,400 for Evolve, excluding VAT, with Beyond on request, and the pricing page says the price depends on GMV. Shopware SaaS is priced the same as self-hosted. No trial of the paid plans was found on the pricing page (https://www.shopware.com/en/pricing/, checked 2026-10-08).", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs, the repository or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 14, "popularity": { "githubStars": 3400, "npmWeekly": 30917, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://developer.shopware.com/docs/", "llmsTxt": "https://developer.shopware.com/llms.txt", "openapi": "https://github.com/shopware/shopware/tree/trunk/src/Core/Framework/Api/ApiDefinition/Generator/Schema", "capabilities": [ "commerce.products", "commerce.cart", "commerce.checkout", "commerce.orders", "commerce.headless" ], "tags": [ "open-source", "self-hosted", "local", "hosted", "mcp", "openapi", "llms-txt", "oauth", "php", "typescript", "webhooks", "freemium", "eu", "bug-bounty", "iso27001", "beta" ], "lastRelease": "2026-10-02", "graded": true, "anchor": { "graded": true, "score": 71.4, "grade": "BB", "agentReady": true, "rank": 112, "ranked": true, "rankOf": 722, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 78, "maintenance": 87, "payments": 50, "reliability": 83, "schema": 85, "security": 73, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -5, "negativeNotes": [ "GitHub lists 20 security advisories for shopware/shopware published between 19 May and 16 September 2026, four of them critical (an app script sandbox escape, stored SQL injection through app manifests, admin account takeover by host-header poisoning and a webhook permission bypass), plus a pre-authentication SQL injection in the Store API (GHSA-p37c-pm9p-7vm5, CVSS 8.6, published 25 August 2026, fixed in 6.7.13.1 and 6.6.10.23). All were disclosed in public with fixed versions, so the deduction is 5 of a possible 15 (https://github.com/shopware/shopware/security/advisories)." ], "verdict": "MIT-licensed core with OpenAPI specs for both APIs and a built-in MCP server that advertises three discovery tools, previews writes by default and limits each integration to an allowlist. The MCP server is experimental until 6.8, and 20 security advisories were published between May and September 2026, four of them critical.", "bestFor": "A merchant already on Shopware, or a team that wants an MIT PHP backend with a built-in MCP server for back-office work.", "strengths": [ "MIT core, free to self-host, with security fixes for the 6.7 line promised until 28 February 2028 in releases.json", "Built-in MCP server advertises three discovery tools, and other tools load by toolset for the session", "MCP write tools default to dryRun=true, which runs the change in a transaction and rolls it back", "Per-integration ACL roles and MCP allowlists, with a 300 a minute limit on /api/_mcp", "OpenAPI 3 schemas for the Store API and Admin API in the repository, plus llms.txt and Markdown docs" ], "weaknesses": [ "The MCP server is marked experimental until 6.8, and 6.7.14.0 changed what tools/list returns on the Store API endpoint", "20 advisories published between 19 May and 16 September 2026, four critical, including a pre-authentication SQL injection in the Store API", "MCP tools carry no readOnlyHint or destructiveHint annotations, and criteria and payloads travel as JSON-encoded strings", "A 429 from the MCP endpoints carries the wait time in the body, with no Retry-After header", "The Store API MCP endpoint ships one domain tool, has no allowlist, and the security.txt file expired on 31 December 2025" ], "agentNotes": [ "Ask the merchant for an integration without --admin, tied to an ACL role and an MCP allowlist. Send sw-access-key and sw-secret-access-key headers to /api/_mcp", "Call shopware-tool-search first, then shopware-toolset-enable, and keep the Mcp-Session-Id header. A fresh session lists only three tools", "Pass dryRun=false to commit a write. shopware-media-upload has no dry run and uploads at once", "For shopping, call the Store API over HTTP with the sales channel's sw-access-key and keep the sw-context-token. The Store API MCP endpoint has no cart tools in core", "Send `includes` in search criteria to cut response size, and read the 429 body for the wait time" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 71.4 } ], "editorialScores": { "ergonomics": 78, "maintenance": 87, "payments": 50, "reliability": 83, "schema": 85, "security": 73, "transparency": 80 }, "provenanceScore": 71 }, "connect": { "install": "npx @shopware-ag/shopware-cli project create my-shop", "http": "curl -X POST \"http://localhost:8000/api/search/product\" \\\n -H \"Authorization: Bearer YOUR_ACCESS_TOKEN\" \\\n -H \"Content-Type: application/json\" \\\n -d '{}'", "claudeCode": "claude mcp add --transport http shopware http://localhost:8000/api/_mcp --header \"sw-access-key: SWIA...\" --header \"sw-secret-access-key: ...\"", "config": { "mcpServers": { "shopware": { "headers": { "sw-access-key": "SWIA...", "sw-secret-access-key": "..." }, "type": "streamable-http", "url": "https://your-shop.example.com/api/_mcp" } } } }, "letme": { "capability": "https://letme.dev/commerce.products", "tool": "https://letme.dev/shopware" }, "area": "business", "unitPrices": [ { "item": "Community Edition", "unit": "month", "usd": 0, "note": "MIT core, you pay for your own hosting" } ], "provenance": { "legalEntity": "shopware AG", "domain": "shopware.com", "domainRegistered": "1998-08-08", "endpointOnVendorDomain": false, "terms": "https://www.shopware.com/en/gtc/", "privacy": "https://www.shopware.com/en/privacy/", "statusPage": "https://status.shopware.com", "changelog": "https://github.com/shopware/shopware/releases", "securityTxt": "expired", "checked": "2026-10-08", "notes": [ "The legal notice names shopware AG, Ebbinghoff 10, 48624 Schoeppingen, Germany, Amtsgericht Coesfeld HRB 11471.", "The general terms cover every product. Part 2 covers the free Community Edition and Part 4 covers SaaS, and only the German version is binding.", "The Store API, Admin API and MCP endpoints run on each merchant's own domain or SaaS shop, not on shopware.com.", "security.txt at www.shopware.com gives Expires 31 December 2025.", "www.shopware.com answered several requests with a 503 first byte timeout on 8 October 2026. The terms loaded on a retry and the privacy page loaded once.", "status.shopware.com covers Shopware SaaS, PaaS and vendor services, not self-hosted stores.", "Verisign RDAP gives a registration date of 1998-08-08 for shopware.com." ], "score": 71 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/shopware.json", "live": { "slug": "shopware", "vendorStatus": { "page": "https://status.shopware.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-08T19:39:10.49832559Z" }, "pages": [ { "url": "https://www.shopware.com/en/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-08T18:30:28.817122652Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a8eeb1d7324d" }, { "url": "https://www.shopware.com/en/privacy/", "kind": "privacy", "status": 503, "checkedAt": "2026-10-08T18:30:30.769152247Z", "changedAt": "0001-01-01T00:00:00Z" }, { "url": "https://www.shopware.com/en/gtc/", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:30:26.06911646Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "034d628e8015" } ], "updatedAt": "2026-10-08T19:39:10.49832559Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Adobe Inc.", "b": "shopware AG", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary for Adobe Commerce under Adobe's General Terms and product-specific licensing terms. The Magento Open Source core is OSL 3.0", "b": "MIT for the Community Edition core. Paid plans add proprietary extensions under shopware AG's general terms", "name": "Licence" }, { "a": "none", "b": "14", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-07", "b": "2026-10-02", "name": "Last release" }, { "a": "", "b": "2026-06-10", "name": "Terms last updated" }, { "a": "2025-10-24", "b": "couldn't be read", "name": "Privacy policy last updated" }, { "a": "", "b": "yes", "name": "Customer content may train models" }, { "a": "", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "12k stars, 1.3k npm/wk", "b": "3.4k stars, 31k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Shopware scores 71.4 (BB) on agent readiness against Adobe Commerce (Magento)'s 63.9 (B), and leads in 6 of 7 scored categories. Adobe Commerce (Magento) leads on transparency \u0026 trust.", "question": "Which is better for AI agents, Adobe Commerce (Magento) or Shopware?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Adobe Commerce (Magento) and Shopware need an API key?" }, { "answer": "No hosted endpoint is listed for Adobe Commerce (Magento). No hosted endpoint is listed for Shopware.", "question": "Can an agent call Adobe Commerce (Magento) and Shopware without installing anything?" }, { "answer": "Yes. Adobe Commerce (Magento) is open source (Proprietary for Adobe Commerce under Adobe's General Terms and product-specific licensing terms. The Magento Open Source core is OSL 3.0). Shopware is open source (MIT for the Community Edition core. Paid plans add proprietary extensions under shopware AG's general terms).", "question": "Are Adobe Commerce (Magento) and Shopware open source?" } ], "goodFor": [ { "aheadOn": [ "Transparency \u0026 trust, 90 against 76" ], "also": [ "No incidents deducted, where Shopware loses 5 points for them" ], "goodFor": "An agent working for a merchant already on Adobe Commerce or Magento, for catalogue, order and B2B back-office work over REST and for carts and checkout over GraphQL.", "slug": "adobe-commerce", "watchFor": "No request rate limit for the REST or GraphQL APIs was found in the reviewed documentation, and 429 handling appears only in a code sample" }, { "aheadOn": [ "Reliability, 83 against 55", "Agent ergonomics, 78 against 67", "Security \u0026 auth, 73 against 60", "Payments \u0026 pricing, 50 against 30", "Maintenance \u0026 community, 87 against 75" ], "also": [ "Agent-ready, a grade of BB or better" ], "goodFor": "A merchant already on Shopware, or a team that wants an MIT PHP backend with a built-in MCP server for back-office work.", "slug": "shopware", "watchFor": "The MCP server is marked experimental until 6.8, and 6.7.14.0 changed what tools/list returns on the Store API endpoint" } ], "job": { "capability": "commerce.products", "name": "Commerce products" }, "others": [ { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-bigcommerce.json", "title": "Adobe Commerce (Magento) vs BigCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-bigcommerce" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-commerce-layer.json", "title": "Adobe Commerce (Magento) vs Commerce Layer API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-commerce-layer" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-commercetools.json", "title": "Adobe Commerce (Magento) vs commercetools", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-commercetools" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-ecwid.json", "title": "Adobe Commerce (Magento) vs Ecwid by Lightspeed", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-ecwid" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-elastic-path.json", "title": "Adobe Commerce (Magento) vs Elastic Path API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-elastic-path" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-medusa.json", "title": "Adobe Commerce (Magento) vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-saleor.json", "title": "Adobe Commerce (Magento) vs Saleor API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-saleor" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-shopify.json", "title": "Adobe Commerce (Magento) vs Shopify API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-shopify" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-snipcart.json", "title": "Adobe Commerce (Magento) vs Snipcart API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-snipcart" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-square.json", "title": "Adobe Commerce (Magento) vs Square", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-square" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-swell.json", "title": "Adobe Commerce (Magento) vs Swell", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-swell" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-vendure.json", "title": "Adobe Commerce (Magento) vs Vendure", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-vendure" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-wix.json", "title": "Adobe Commerce (Magento) vs Wix Stores and eCommerce API", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-wix" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-woocommerce.json", "title": "Adobe Commerce (Magento) vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/bigcommerce-vs-shopware.json", "title": "BigCommerce API + MCP vs Shopware", "url": "https://www.anchorterminal.com/compare/bigcommerce-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/commerce-layer-vs-shopware.json", "title": "Commerce Layer API + MCP vs Shopware", "url": "https://www.anchorterminal.com/compare/commerce-layer-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/commercetools-vs-shopware.json", "title": "commercetools vs Shopware", "url": "https://www.anchorterminal.com/compare/commercetools-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/ecwid-vs-shopware.json", "title": "Ecwid by Lightspeed vs Shopware", "url": "https://www.anchorterminal.com/compare/ecwid-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/elastic-path-vs-shopware.json", "title": "Elastic Path API + MCP vs Shopware", "url": "https://www.anchorterminal.com/compare/elastic-path-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-shopware.json", "title": "Medusa API + MCP vs Shopware", "url": "https://www.anchorterminal.com/compare/medusa-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/saleor-vs-shopware.json", "title": "Saleor API + MCP vs Shopware", "url": "https://www.anchorterminal.com/compare/saleor-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/shopify-vs-shopware.json", "title": "Shopify API + MCP vs Shopware", "url": "https://www.anchorterminal.com/compare/shopify-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/shopware-vs-snipcart.json", "title": "Shopware vs Snipcart API + MCP", "url": "https://www.anchorterminal.com/compare/shopware-vs-snipcart" }, { "json": "https://www.anchorterminal.com/compare/shopware-vs-square.json", "title": "Shopware vs Square", "url": "https://www.anchorterminal.com/compare/shopware-vs-square" }, { "json": "https://www.anchorterminal.com/compare/shopware-vs-swell.json", "title": "Shopware vs Swell", "url": "https://www.anchorterminal.com/compare/shopware-vs-swell" }, { "json": "https://www.anchorterminal.com/compare/shopware-vs-vendure.json", "title": "Shopware vs Vendure", "url": "https://www.anchorterminal.com/compare/shopware-vs-vendure" }, { "json": "https://www.anchorterminal.com/compare/shopware-vs-wix.json", "title": "Shopware vs Wix Stores and eCommerce API", "url": "https://www.anchorterminal.com/compare/shopware-vs-wix" }, { "json": "https://www.anchorterminal.com/compare/shopware-vs-woocommerce.json", "title": "Shopware vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/shopware-vs-woocommerce" } ], "scores": [ { "adobe-commerce": 55, "by": 28, "edge": "shopware", "key": "reliability", "name": "Reliability", "shopware": 83, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "adobe-commerce": 82, "by": 3, "edge": "shopware", "key": "schema", "name": "Schema \u0026 documentation", "shopware": 85, "weight": 13 }, { "adobe-commerce": 67, "by": 11, "edge": "shopware", "key": "ergonomics", "name": "Agent ergonomics", "shopware": 78, "weight": 13 }, { "adobe-commerce": 60, "by": 13, "edge": "shopware", "key": "security", "name": "Security \u0026 auth", "shopware": 73, "weight": 14 }, { "adobe-commerce": 30, "by": 20, "edge": "shopware", "key": "payments", "name": "Payments \u0026 pricing", "shopware": 50, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "adobe-commerce": 75, "by": 12, "edge": "shopware", "key": "maintenance", "name": "Maintenance \u0026 community", "shopware": 87, "weight": 7 }, { "adobe-commerce": 90, "by": 14, "edge": "adobe-commerce", "key": "transparency", "name": "Transparency \u0026 trust", "shopware": 76, "weight": 7 } ], "summary": "Shopware scores 71.4 (BB) on agent readiness against Adobe Commerce (Magento)'s 63.9 (B), and leads in 6 of 7 scored categories. Adobe Commerce (Magento) leads on transparency \u0026 trust. Both do commerce products.", "verdicts": { "adobe-commerce": "Public Swagger files cover 510 REST operations for the cloud service, the GraphQL schema carries cart, checkout and order mutations, and the cloud service authenticates by OAuth 2 through Adobe IMS. No request rate limit or idempotency key was found in the API documentation, Adobe publishes no MCP server for Commerce, and a licence starts with a sales order.", "shopware": "MIT-licensed core with OpenAPI specs for both APIs and a built-in MCP server that advertises three discovery tools, previews writes by default and limits each integration to an allowlist. The MCP server is experimental until 6.8, and 20 security advisories were published between May and September 2026, four of them critical." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/adobe-commerce-vs-shopware", "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-shopware.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/adobe-commerce-vs-shopware.md", "slim": "https://www.anchorterminal.com/compare/adobe-commerce-vs-shopware.min.md" }, "markdown": "Shopware scores 71.4 (BB) on agent readiness against Adobe Commerce (Magento)'s 63.9 (B), and leads in 6 of 7 scored categories. Adobe Commerce (Magento) leads on transparency \u0026 trust. Both do commerce products.\n\n- Adobe Commerce (Magento): grade B, 63.9/100, rank #290 of 722. Markdown https://www.anchorterminal.com/tools/adobe-commerce.md · JSON https://www.anchorterminal.com/api/v1/tools/adobe-commerce.json\n- Shopware: grade BB, 71.4/100, rank #112 of 722. Markdown https://www.anchorterminal.com/tools/shopware.md · JSON https://www.anchorterminal.com/api/v1/tools/shopware.json\n\n## Which one, for what\n\n### Adobe Commerce (Magento) (B)\n\nGood for: An agent working for a merchant already on Adobe Commerce or Magento, for catalogue, order and B2B back-office work over REST and for carts and checkout over GraphQL.\n\nAhead on:\n- Transparency \u0026 trust, 90 against 76\n\nAlso in its favour:\n- No incidents deducted, where Shopware loses 5 points for them\n\nWatch for: No request rate limit for the REST or GraphQL APIs was found in the reviewed documentation, and 429 handling appears only in a code sample\n\n### Shopware (BB)\n\nGood for: A merchant already on Shopware, or a team that wants an MIT PHP backend with a built-in MCP server for back-office work.\n\nAhead on:\n- Reliability, 83 against 55\n- Agent ergonomics, 78 against 67\n- Security \u0026 auth, 73 against 60\n- Payments \u0026 pricing, 50 against 30\n- Maintenance \u0026 community, 87 against 75\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n\nWatch for: The MCP server is marked experimental until 6.8, and 6.7.14.0 changed what tools/list returns on the Store API endpoint\n\n\n## Score by category\n\n| Category | Weight | Adobe Commerce (Magento) | Shopware | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 55 | 83 | Shopware +28 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 82 | 85 | Shopware +3 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 78 | Shopware +11 |\n| Security \u0026 auth | 14% (17.5 this run) | 60 | 73 | Shopware +13 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 50 | Shopware +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 87 | Shopware +12 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 90 | 76 | Adobe Commerce (Magento) +14 |\n| Negative events | ≤15 | 0 | -5 | |\n| **Total** | | **63.9 · B** | **71.4 · BB** | |\n\n## Facts side by side\n\n| Fact | Adobe Commerce (Magento) | Shopware |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Adobe Inc. | shopware AG |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Proprietary for Adobe Commerce under Adobe's General Terms and product-specific licensing terms. The Magento Open Source core is OSL 3.0 | MIT for the Community Edition core. Paid plans add proprietary extensions under shopware AG's general terms |\n| Tools exposed | none | 14 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-07 | 2026-10-02 |\n| Terms last updated | | 2026-06-10 |\n| Privacy policy last updated | 2025-10-24 | couldn't be read |\n| Customer content may train models | | yes |\n| Terms restrict automated access | | not found in the text |\n| Terms restrict benchmarking | | yes |\n| Terms or service can change without notice | | not found in the text |\n| Arbitration or class-action waiver | | not found in the text |\n| Popularity | 12k stars, 1.3k npm/wk | 3.4k stars, 31k npm/wk |\n\n## Verdicts\n\n**Adobe Commerce (Magento).** Public Swagger files cover 510 REST operations for the cloud service, the GraphQL schema carries cart, checkout and order mutations, and the cloud service authenticates by OAuth 2 through Adobe IMS. No request rate limit or idempotency key was found in the API documentation, Adobe publishes no MCP server for Commerce, and a licence starts with a sales order.\n\n**Shopware.** MIT-licensed core with OpenAPI specs for both APIs and a built-in MCP server that advertises three discovery tools, previews writes by default and limits each integration to an allowlist. The MCP server is experimental until 6.8, and 20 security advisories were published between May and September 2026, four of them critical.\n\n## Before you call either\n\n### Adobe Commerce (Magento)\n\n1. Ask which deployment the store is. The cloud service answers at `https://\u003cserver\u003e.api.commerce.adobe.com/\u003ctenant-id\u003e/` with no `/rest` prefix, and other stores at `https://\u003chost\u003e/rest/\u003cstore-view-code\u003e/`\n2. On the cloud service, request an IMS token with the `commerce.accs` scope and send the `Store` header to pick the store view\n3. On a 2.4 store, sign requests with all four integration credentials by OAuth 1.0a. A bare integration token is refused unless the merchant has switched that on\n4. Add `?fields=` to REST calls and set `searchCriteria[pageSize]`. Stores with input limits on cap a page at 300 items\n5. Don't retry `placeOrder` or a POST blindly. Read the cart or order back first, because no idempotency key was found\n\n### Shopware\n\n1. Ask the merchant for an integration without --admin, tied to an ACL role and an MCP allowlist. Send sw-access-key and sw-secret-access-key headers to /api/_mcp\n2. Call shopware-tool-search first, then shopware-toolset-enable, and keep the Mcp-Session-Id header. A fresh session lists only three tools\n3. Pass dryRun=false to commit a write. shopware-media-upload has no dry run and uploads at once\n4. For shopping, call the Store API over HTTP with the sales channel's sw-access-key and keep the sw-context-token. The Store API MCP endpoint has no cart tools in core\n5. Send `includes` in search criteria to cut response size, and read the 429 body for the wait time\n\n## Questions\n\n### Which is better for AI agents, Adobe Commerce (Magento) or Shopware?\n\nShopware scores 71.4 (BB) on agent readiness against Adobe Commerce (Magento)'s 63.9 (B), and leads in 6 of 7 scored categories. Adobe Commerce (Magento) leads on transparency \u0026 trust.\n\n### Do Adobe Commerce (Magento) and Shopware need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Adobe Commerce (Magento) and Shopware without installing anything?\n\nNo hosted endpoint is listed for Adobe Commerce (Magento). No hosted endpoint is listed for Shopware.\n\n### Are Adobe Commerce (Magento) and Shopware open source?\n\nYes. Adobe Commerce (Magento) is open source (Proprietary for Adobe Commerce under Adobe's General Terms and product-specific licensing terms. The Magento Open Source core is OSL 3.0). Shopware is open source (MIT for the Community Edition core. Paid plans add proprietary extensions under shopware AG's general terms).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/adobe-commerce-vs-shopware.json, and with the fewest tokens: https://www.anchorterminal.com/compare/adobe-commerce-vs-shopware.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"adobe-commerce\", \"b\": \"shopware\"}`. From a terminal: `anchor compare adobe-commerce shopware`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/adobe-commerce.json and https://www.anchorterminal.com/api/v1/tools/shopware.json\n\n## Other comparisons with Adobe Commerce (Magento) or Shopware\n\n- [Adobe Commerce (Magento) vs BigCommerce API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-bigcommerce.md)\n- [Adobe Commerce (Magento) vs Commerce Layer API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-commerce-layer.md)\n- [Adobe Commerce (Magento) vs commercetools](https://www.anchorterminal.com/compare/adobe-commerce-vs-commercetools.md)\n- [Adobe Commerce (Magento) vs Ecwid by Lightspeed](https://www.anchorterminal.com/compare/adobe-commerce-vs-ecwid.md)\n- [Adobe Commerce (Magento) vs Elastic Path API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-elastic-path.md)\n- [Adobe Commerce (Magento) vs Medusa API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-medusa.md)\n- [Adobe Commerce (Magento) vs Saleor API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-saleor.md)\n- [Adobe Commerce (Magento) vs Shopify API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-shopify.md)\n- [Adobe Commerce (Magento) vs Snipcart API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-snipcart.md)\n- [Adobe Commerce (Magento) vs Square](https://www.anchorterminal.com/compare/adobe-commerce-vs-square.md)\n- [Adobe Commerce (Magento) vs Swell](https://www.anchorterminal.com/compare/adobe-commerce-vs-swell.md)\n- [Adobe Commerce (Magento) vs Vendure](https://www.anchorterminal.com/compare/adobe-commerce-vs-vendure.md)\n- [Adobe Commerce (Magento) vs Wix Stores and eCommerce API](https://www.anchorterminal.com/compare/adobe-commerce-vs-wix.md)\n- [Adobe Commerce (Magento) vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-woocommerce.md)\n- [BigCommerce API + MCP vs Shopware](https://www.anchorterminal.com/compare/bigcommerce-vs-shopware.md)\n- [Commerce Layer API + MCP vs Shopware](https://www.anchorterminal.com/compare/commerce-layer-vs-shopware.md)\n- [commercetools vs Shopware](https://www.anchorterminal.com/compare/commercetools-vs-shopware.md)\n- [Ecwid by Lightspeed vs Shopware](https://www.anchorterminal.com/compare/ecwid-vs-shopware.md)\n- [Elastic Path API + MCP vs Shopware](https://www.anchorterminal.com/compare/elastic-path-vs-shopware.md)\n- [Medusa API + MCP vs Shopware](https://www.anchorterminal.com/compare/medusa-vs-shopware.md)\n- [Saleor API + MCP vs Shopware](https://www.anchorterminal.com/compare/saleor-vs-shopware.md)\n- [Shopify API + MCP vs Shopware](https://www.anchorterminal.com/compare/shopify-vs-shopware.md)\n- [Shopware vs Snipcart API + MCP](https://www.anchorterminal.com/compare/shopware-vs-snipcart.md)\n- [Shopware vs Square](https://www.anchorterminal.com/compare/shopware-vs-square.md)\n- [Shopware vs Swell](https://www.anchorterminal.com/compare/shopware-vs-swell.md)\n- [Shopware vs Vendure](https://www.anchorterminal.com/compare/shopware-vs-vendure.md)\n- [Shopware vs Wix Stores and eCommerce API](https://www.anchorterminal.com/compare/shopware-vs-wix.md)\n- [Shopware vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/shopware-vs-woocommerce.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Adobe Commerce (Magento) vs Shopware", "url": "" } ], "description": "Shopware scores 71.4 (BB) on agent readiness against Adobe Commerce (Magento)'s 63.9 (B), and leads in 6 of 7 scored categories. Adobe Commerce (Magento) leads on transparency \u0026 trust. Both do commerce products. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Adobe Commerce (Magento) B 63.9", "Shopware BB 71.4", "scores" ], "h1": "Adobe Commerce (Magento) vs Shopware", "image": "https://www.anchorterminal.com/assets/og/compare-adobe-commerce-vs-shopware.png", "path": "/compare/adobe-commerce-vs-shopware", "published": "2026-10-01", "section": "tools", "title": "Adobe Commerce (Magento) vs Shopware for AI agents, B 63.9 vs BB 71.4", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-shopware" }, "tokens": { "markdown": 2800, "slim": 730 }, "version": 1 }