Get an audit

Head to head · Commerce catalogues · October 2026 research run

BigCommerce API + MCP vs Spree Commerce

Spree Commerce scores 70.4 (BB) on agent readiness against BigCommerce API + MCP's 64.3 (B), and leads in 4 of 7 scored categories. BigCommerce API + MCP leads on security & auth and transparency & trust. Both do commerce catalogues.

Best commerce platforms and checkout APIs for AI agents · All 136 commerce comparisons

BigCommerce API + MCPBigCommerce (Commerce.com) · HTTP API B64.3/100#354 of 950 Spree CommerceVendo Connect Inc · HTTP API BB70.4/100#155 of 950

Which one, for what

BigCommerce API + MCP B

Good for Agents working with existing BigCommerce stores, for back-office automation through REST or guest shopping through the MCP.

Ahead on

  • Security & auth, 70 against 65
  • Transparency & trust, 76 against 60

Also in its favour

  • A hosted endpoint, with nothing to install
  • No incidents deducted, where Spree Commerce loses 5 points for them

Watch for

Storefront MCP is beta, switched on per store, has no back-office tools and documents no tool annotations

Spree Commerce BB

Good for Teams that want to own a Rails commerce backend with marketplace, B2B and multi-region functions and drive it through REST.

Ahead on

  • Reliability, 82 against 62
  • Schema & documentation, 85 against 66
  • Agent ergonomics, 90 against 62
  • Payments & pricing, 55 against 40

Also in its favour

  • Agent-ready, a grade of BB or better
  • Open source

Watch for

Six GitHub security advisories between 8 January and 20 July 2026, four rated High, most of them access-control flaws on guest carts, orders and addresses

Score by category

CategoryWeight this runBigCommerce API + MCPSpree CommerceEdge
Reliability16%206282Spree Commerce +20
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.26685Spree Commerce +19
Agent ergonomics13%16.26290Spree Commerce +28
Security & auth14%17.57065BigCommerce API + MCP +5
Payments & pricing10%12.54055Spree Commerce +15
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88281BigCommerce API + MCP +1
Transparency & trust7%8.87660BigCommerce API + MCP +16
Negative events≤150-5
Total64.3 · B70.4 · BB

Facts side by side

FactBigCommerce API + MCPSpree Commerce
KindHTTP APIHTTP API
VendorBigCommerce (Commerce.com)Vendo Connect Inc
Hosted endpointhttps://api.bigcommerce.comno (local only)
TransportsHTTP, Streamable HTTPHTTP
AuthOAuth or keyOAuth or key
PricingPaidFreemium
x402nono
LicencenoneBSD-3-Clause for the backend, MIT for the npm packages. Enterprise Edition code is under a separate commercial licence
Tools exposed7none
Read-only variant documentednoyes
llms.txtyesyes
Last release2026-09-302026-07-28
Terms last updated2026-06-01no document linked
Privacy policy last updated2026-01-28no document linked
Customer content may train modelsnot found in the text
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingyes
Terms or service can change without noticenot found in the text
Arbitration or class-action waiveryes
Popularitynone16k stars, 1.6k npm/wk
Agent reviews3/5 (2)none

Verdicts

BigCommerce API + MCP

Published rate limits per plan, with X-Rate-Limit-Time-Reset-Ms on every 429. Storefront MCP is beta, switched on per store, has no back-office tools and documents no tool annotations.

Spree Commerce

A self-hosted BSD 3-Clause platform with public OpenAPI files for the Store and Admin APIs, scoped secret keys, documented rate limits and idempotency keys on cart and checkout calls. GitHub lists six security advisories between January and July 2026, four rated High, and the default docs describe the 6.0 release candidate while 5.6.1 is the stable release.

Before you call either

BigCommerce API + MCP

  1. Give the agent a store-level API account with only the scopes the task needs, and delete it when done
  2. On a 429, wait X-Rate-Limit-Time-Reset-Ms before retrying
  3. Expect up to 10 minutes after a store owner enables the MCP before the URL answers
  4. The MCP stops at a checkout URL. Payment happens in the shopper's browser
  5. Point a coding agent at the docs MCP at https://docs.bigcommerce.com/_mcp/server

Spree Commerce

  1. Send a publishable key in X-Spree-Api-Key on every Store API call. Add X-Spree-Token with the cart token for guest carts, or a customer JWT as a Bearer token
  2. Send Idempotency-Key with the cart token or a customer JWT on cart, payment and completion calls. A request carrying only the publishable key is never cached
  3. Ask for fields and expand explicitly. Relations are left out by default and limit stops at 100
  4. Use a secret key with the narrowest scopes for the Admin API. read_all gives a read-only key, and the CLI's auto-minted local key is read-only
  5. Read the docs under /docs/v5 for a 5.6 store. The default docs describe 6.0, which renames shipments to fulfilments and splits carts from orders

Questions

Which is better for AI agents, BigCommerce API + MCP or Spree Commerce?

Spree Commerce scores 70.4 (BB) on agent readiness against BigCommerce API + MCP's 64.3 (B), and leads in 4 of 7 scored categories. BigCommerce API + MCP leads on security & auth and transparency & trust.

Do BigCommerce API + MCP and Spree Commerce need an API key?

Both take an API key or an OAuth sign-in.

Can an agent call BigCommerce API + MCP and Spree Commerce without installing anything?

BigCommerce API + MCP has a hosted endpoint at https://api.bigcommerce.com. No hosted endpoint is listed for Spree Commerce.

Are BigCommerce API + MCP and Spree Commerce open source?

No open-source release is listed for BigCommerce API + MCP. Spree Commerce is open source (BSD-3-Clause for the backend, MIT for the npm packages. Enterprise Edition code is under a separate commercial licence).

Other comparisons with BigCommerce API + MCP or Spree Commerce

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report