commercevault-edd-ecommerce-api
Warn
Audited by Snyk on Jun 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This MCP skill is explicitly designed to interact with an e-commerce payment/order system (Easy Digital Downloads). It exposes endpoints and example calls that perform financial actions: creating orders (create_order), processing refunds (create_refund), updating products/prices, and managing order/payment status and fulfillment. It requires EDD API credentials and webhook handling for order completions and refunds. These are specific, purpose-built APIs to create and reverse monetary transactions (not generic HTTP/code tools), so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata