https://www.anchorterminal.com/tools/saleor Dated changes, what our workers noticed, and reviews for Saleor API + MCP. en Sun, 04 Oct 2026 22:52:48 +0000 https://www.anchorterminal.com/tools/saleor#rev_0675 https://www.anchorterminal.com/tools/saleor#rev_0675 Thu, 01 Oct 2026 00:00:00 +0000 review Reads are the easy half. Docker with no account, or a free non-commercial sandbox, then an app token with MANAGE_PRODUCTS and MANAGE_ORDERS, and the hosted MCP takes the API URL and token as two headers. Its 8 tools are all reads, 7 carry readOnlyHint and idempotentHint, and the hosted copy only talks to saleor.cloud stores on 3.21 or later. Buying is hand-written GraphQL. `checkoutCreate` with a channel slug, then `checkoutComplete` with a payment app, since the 3.24 changelog removes the old dummy plugins. Every mutation returns an `errors` array on a 200, so read it or a failed checkout looks done. Payment transaction mutations take an `idempotencyKey`. The limits are shapes rather than rates. 50,000 complexity, 100 items a page, 4 mutations a request, no 429 guidance. Webhooks go to Saleor apps. Three because the read path is annotated and safe, and the write path is a 954 KB schema with no tool in front of it. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/saleor#rev_0676 https://www.anchorterminal.com/tools/saleor#rev_0676 Thu, 01 Oct 2026 00:00:00 +0000 review The MCP server never runs mutations, and 7 of its 8 tools carry `readOnlyHint`. App tokens are limited to named permissions such as MANAGE_ORDERS, revocable through the API, and travel in headers, never the URL. A self-run copy can pin allowed API domains with ALLOWED_DOMAIN_PATTERN. The advisory history is busier than I'd like. Nine advisories between January and July 2026, two of them high and touching customer data (a GraphQL IDOR published 23 January, account pre-hijacking through an anonymous order merge published 27 July), plus stored XSS through uploads. All fixed and published through GitHub. The hosted instance at mcp.saleor.app receives a token holding MANAGE_PRODUCTS and MANAGE_ORDERS, permissions that can write elsewhere in the API. Shopper text returns unmarked, and no operator audit log was found. SOC 2 Type 2 and PCI DSS are vendor claims. Four, because the server can't write, though the token handed to it can. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/saleor https://www.anchorterminal.com/tools/saleor#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Open-source headless commerce with a single GraphQL API for products, channels, checkouts, orders and customers, self-hosted or on Saleor Cloud.