Aimeos 2026.10: MCP tools for Laravel e-commerce
Aimeos is an open-source e-commerce framework for Laravel applications. Version 2026.10 adds MCP tools that let AI agents search products, update orders and manage customers in your shop.
An agent could retrieve selected products, draft improved descriptions and save the changes after your approval. Aimeos provides the tools for reading and updating shop data; your integration handles the agent workflow and approval step.
What's new
MCP tools for AI agents
Model Context Protocol (MCP) gives AI applications a standard way to discover and call tools. The new ai-admin-mcp extension provides tools for more than 20 shop domains, including products, categories, orders, customers and stock. Depending on the domain, agents can search and aggregate records, save and delete items, and change category trees.
composer require aimeos/ai-admin-mcp
Each tool validates its arguments and checks permissions using the Aimeos context supplied by your integration. In admin/mcp/resource you configure which user groups may call which tool.
The package doesn't include an MCP transport or SDK. Each tool exposes an input schema and returns its results as PHP arrays.
Your integration registers the tool definitions with an MCP server and routes calls to their execution methods. Expose only the tools you need. The MCP package README shows how to retrieve the tool catalog, inspect definitions and execute calls.
WebMCP in the storefront
WebMCP is a proposed browser standard that lets websites describe actions for AI agents. The Aimeos storefront now uses it on the forms for addresses, saved baskets, coupons and product watch lists. Browser agents that support WebMCP can fill these forms for the customer. Few browsers support it yet, and for regular visitors the forms work as before.
Choose an AI provider for each task
In the admin backend, you can write and translate texts, generate images and remove image backgrounds with AI. In 2026.10, these features use Prisma (aimeos/prisma), our PHP library for AI providers. You can configure a different provider and model for each task. Switching providers later is a configuration change.
Imports and exports
Customer, product, category and supplier imports can combine file data with configured values. For example, set a fixed product.status in the import mapping and omit the repetitive status column from your CSV.
Order, product and subscription exports can be extended with project-specific data before the files are written, for example fields your ERP or CRM system expects.
Framework support
Laravel 10 to 13 remain supported, Symfony 8 and TYPO3 14 are now supported too.
Security hardening
- Customer password hashes are excluded from loaded customer items and API responses. Admin APIs apply tighter checks to shared items and customer group assignments.
- HTML sanitization and output encoding strengthen XSS protection. Remote image and CMS media fetching blocks internal addresses to protect against SSRF.
- Checkout steps require POST requests. Guest orders can't be linked to existing accounts by e-mail, and site settings can't overwrite internal configuration keys.
For published vulnerabilities and affected versions, see the core security advisories.
How Aimeos fits into your application
You can install Aimeos (LGPLv3) into an existing Laravel application as a Composer package. It uses your routes, middleware, authentication, queues and Blade views.
Use the JSON:API for a custom frontend, or start with the server-rendered HTML components included with Aimeos. GraphQL and now MCP cover administration.
Aimeos is multi-vendor, multi-language, and multi-currency capable so you can run several shops with their own catalogs, prices, languages and currencies.
Aimeos is self-hosted, so you control your shop database and hosting, with no Aimeos fees per transaction. Data sent to external AI services depends on the provider and features you configure.
Get started
You can install different packages, depending on your needs:
# Full shop system
composer create-project aimeos/aimeos
# Headless API
composer create-project aimeos/aimeos-headless
# Laravel package only
composer require aimeos/aimeos-laravel
- New to Aimeos? Follow the Laravel setup guide or explore the demo shop.
- Upgrading an existing shop? Read the upgrade guidance before updating your dependencies.
- Building an agent integration? Install aimeos/ai-admin-mcp and use the tool catalog example to connect the tools to your MCP server.
You can find the application source on GitHub.
If you like Aimeos, give it a star! :-)
1 reaction
Mentions
Aimeos 2026.10: MCP tools for Laravel e-commerce Aimeos is an open-source e-commerce framework for Laravel applications. Version 2026.10 adds MCP tools that let AI agents search products, update orders and manage customers in your shop. An agent could retrieve selected products, draft improved descriptions and save the changes after your approval. Aimeos provides the tools for reading and updating shop data; your integration handles the agent workflow and approval step. What's new MCP tools for AI agents Model Context Protocol (MCP) gives AI applications a standard way to discover and call tools. The new ai-admin-mcp extension provides tools for more than 20 shop domains, including products, categories, orders, customers and stock. Depending on the domain, agents can search and aggregate records, save and delete items, and change category trees. composer require aimeos/ai-admin-mcp Each tool validates its arguments and checks permissions using the Aimeos context supplied by your integration. In admin/mcp/resource you configure which user groups may call which tool. The package doesn't include an MCP transport or SDK. Each tool exposes an input schema and returns its results as PHP arrays. Your integration registers the tool definitions with an MCP server and routes calls to their execution methods. Expose only the tools you need. The MCP package README shows how to retrieve the tool catalog, inspect definitions and execute calls. WebMCP in the storefront WebMCP is a proposed browser standard that lets websites describe actions for AI agents. The Aimeos storefront now uses it on the forms for addresses, saved baskets, coupons and product watch lists. Browser agents that support WebMCP can fill these forms for the customer. Few browsers support it yet, and for regular visitors the forms work as before. Choose an AI provider for each task In the admin backend, you can write and translate texts, generate images and remove image backgrounds with AI. In 2026.10, these features use Prisma (aimeos/prisma), our PHP library for AI providers. You can configure a different provider and model for each task. Switching providers later is a configuration change. Imports and exports Customer, product, category and supplier imports can combine file data with configured values. For example, set a fixed product.status in the import mapping and omit the repetitive status column from your CSV. Order, product and subscription exports can be extended with project-specific data before the files are written, for example fields your ERP or CRM system expects. Framework support Laravel 10 to 13 remain supported, Symfony 8 and TYPO3 14 are now supported too. Security hardening - Customer password hashes are excluded from loaded customer items and API responses. Admin APIs apply tighter checks to shared items and customer group assignments. - HTML sanitization and output encoding strengthen XSS protection. Remote image and CMS media fetching blocks internal addresses to protect against SSRF. - Checkout steps require POST requests. Guest orders can't be linked to existing accounts by e-mail, and site settings can't overwrite internal configuration keys. For published vulnerabilities and affected versions, see the core security advisories. How Aimeos fits into your application You can install Aimeos (LGPLv3) into an existing Laravel application as a Composer package. It uses your routes, middleware, authentication, queues and Blade views. Use the JSON:API for a custom frontend, or start with the server-rendered HTML components included with Aimeos. GraphQL and now MCP cover administration. Aimeos is multi-vendor, multi-language, and multi-currency capable so you can run several shops with their own catalogs, prices, languages and currencies. Aimeos is self-hosted, so you control your shop database and hosting, with no Aimeos fees per transaction. Data sent to external AI services depends on the provider and features you configure. Get started You can install different packages, depending on your needs: # Full shop system composer create-project aimeos/aimeos # Headless API composer create-project aimeos/aimeos-headless # Laravel package only composer require aimeos/aimeos-laravel - New to Aimeos? Follow the Laravel setup guide or explore the demo shop. - Upgrading an existing shop? Read the upgrade guidance before updating your dependencies. - Building an agent integration? Install aimeos/ai-admin-mcp and use the tool catalog example to connect the tools to your MCP server. You can find the application source on GitHub. If you like Aimeos, give it a star! :-)