magento.watch
by magento.watch · remote · no sign-in to list tools · v1.0.0 · published by watch.magento
Magento Open Source, Adobe Commerce and Mage-OS releases, EOL, requirements, CVEs and patches
Changes · 2
13 tools: 2 change things and 11 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads11Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http magento-watch https://magento.watch/mcp/apiTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
13 tools
Changes things 2Claude Code: ask
check_compatibilityCheck if a specific PHP, MySQL, or other dependency version is compatible with a Magento versionNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check if a specific PHP, MySQL, or other dependency version is compatible with a Magento version
check_version_securityCheck whether a specific Magento/Adobe Commerce version is vulnerable to known security bulletins, and which version fixes it.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check whether a specific Magento/Adobe Commerce version is vulnerable to known security bulletins, and which version fixes it. A version is also vulnerable when the only remedy from Adobe is an isolated patch applied on top of that base release; fixedIn is then null. This is the tool to call when a user asks "is my Magento vulnerable" or "which patch fixes CVE-...".
Only reads 11Claude Code: allow
find_patchFind Adobe Quality Patches Tool (QPT) patches for a Magento Open Source or Adobe Commerce version.No findings
Why it is in this group
- The name "find_patch" says "find": a word for reading.
Description, as the server wrote it Find Adobe Quality Patches Tool (QPT) patches for a Magento Open Source or Adobe Commerce version. With only distribution and version it lists every applicable patch. Add query (symptoms, error text, feature words or a patch id like ACSD-56760), modules (e.g. "catalog", "module-sales") or categories (QPT names like "Admin", "Catalog/Product") to get a ranked list with a 0-100 relevance score and the signals that matched. Covers quality patches only; for security fixes use check_version_security. List mode can return several hundred hits; pass query, modules or categories to rank and limit. Mage-OS is not a QPT target and always returns status "unknown".
find_upstream_fixCommunity fixes merged into magento/magento2 after a release line was cut, with per-version applicability from git apply checks; not Adobe Quality Patches, for those use find_patch…No findings
Why it is in this group
- The name "find_upstream_fix" says "find": a word for reading.
Description, as the server wrote it Community fixes merged into magento/magento2 after a release line was cut, with per-version applicability from git apply checks; not Adobe Quality Patches, for those use find_patch. With only distribution and version it lists, newest first, every upstream fix whose code applies cleanly to that version and that the version does not contain yet. Add query (symptoms, error text, feature words or an id like magento2-40867), modules or categories (QPT category names like "GraphQL", "Catalog/Product") to get a ranked list with a 0-100 relevance score and the signals that matched. fixedIn filters by the first release that contains the fix (null for fixes not in any release yet). Mage-OS always returns status "unknown"; a version outside the checked release tags returns status "unknown-version".
get_all_versionsGet all versions for a distribution with their lifecycle information.No findings
Why it is in this group
- The name "get_all_versions" says "get": a word for reading.
Description, as the server wrote it Get all versions for a distribution with their lifecycle information. Each version carries `securitySummary` { status, requiredPatches, upgradeRequired }: `isSecureVersion` and `statusLabel` describe the support lifecycle only, so a supported version can still have open bulletins. Call check_version_security for the remedies.
get_eol_versionsGet versions that have reached end-of-life.No findings
Why it is in this group
- The name "get_eol_versions" says "get": a word for reading.
Description, as the server wrote it Get versions that have reached end-of-life. Each version carries `securitySummary` { status, requiredPatches, upgradeRequired }: `isSecureVersion` and `statusLabel` describe the support lifecycle only, so a supported version can still have open bulletins. Call check_version_security for the remedies.
get_latest_versionGet the latest stable version for a distribution.No findings
Why it is in this group
- The name "get_latest_version" says "get": a word for reading.
Description, as the server wrote it Get the latest stable version for a distribution. Each version carries `securitySummary` { status, requiredPatches, upgradeRequired }: `isSecureVersion` and `statusLabel` describe the support lifecycle only, so a supported version can still have open bulletins. Call check_version_security for the remedies.
get_patchGet one Quality Patches Tool patch by id (e.g.No findings
Why it is in this group
- The name "get_patch" says "get": a word for reading.
Description, as the server wrote it Get one Quality Patches Tool patch by id (e.g. "ACSD-56760") with every file variant, its Composer constraint, resolved applicable versions per distribution, modified files, prerequisites, documentation fields and the raw patch URL.
get_security_bulletinGet one security bulletin by id, including a plain-text summary, its CVEs, severity, and which versions per distribution contain the fix.No findings
Why it is in this group
- The name "get_security_bulletin" says "get": a word for reading.
Description, as the server wrote it Get one security bulletin by id, including a plain-text summary, its CVEs, severity, and which versions per distribution contain the fix. Use this when the user names a specific bulletin or asks which patch fixes a given CVE.
get_security_bulletinsList Adobe/Magento security bulletins (CVEs), optionally filtered by severity or publish date.No findings
Why it is in this group
- The name "get_security_bulletins" says "get": a word for reading.
Description, as the server wrote it List Adobe/Magento security bulletins (CVEs), optionally filtered by severity or publish date. Use this to list critical bulletins since a given date, or to survey what has been disclosed.
get_supported_versionsGet only currently supported versions (not EOL, not future releases).No findings
Why it is in this group
- The name "get_supported_versions" says "get": a word for reading.
Description, as the server wrote it Get only currently supported versions (not EOL, not future releases). Each version carries `securitySummary` { status, requiredPatches, upgradeRequired }: `isSecureVersion` and `statusLabel` describe the support lifecycle only, so a supported version can still have open bulletins. Call check_version_security for the remedies.
get_upstream_fixCommunity fixes merged into magento/magento2 after a release line was cut, with per-version applicability from git apply checks; not Adobe Quality Patches, for those use find_patch…No findings
Why it is in this group
- The name "get_upstream_fix" says "get": a word for reading.
Description, as the server wrote it Community fixes merged into magento/magento2 after a release line was cut, with per-version applicability from git apply checks; not Adobe Quality Patches, for those use find_patch. Get one upstream fix by id (e.g. "magento2-40867") with its pull request, linked issues, first release containing it, per-tag code match, affected versions, touched packages and files, labels and triage scores. Pass version, and optionally distribution, to get the code match for that version and the Composer bundle URL when the fix applies to it.
get_versionGet detailed information about a specific Magento/Adobe Commerce version including release date, EOL date, system requirements, and a security summary: `security.fixedBy` (security…No findings
Why it is in this group
- The name "get_version" says "get": a word for reading.
Description, as the server wrote it Get detailed information about a specific Magento/Adobe Commerce version including release date, EOL date, system requirements, and a security summary: `security.fixedBy` (security fixes already included in this version) and `security.vulnerableTo` (open bulletins that still need an upgrade or an isolated patch)
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http magento-watch https://magento.watch/mcp/apiRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__magento-watch__get_version",
"mcp__magento-watch__get_all_versions",
"mcp__magento-watch__get_supported_versions",
"mcp__magento-watch__get_eol_versions",
"mcp__magento-watch__get_latest_version",
"mcp__magento-watch__get_security_bulletins",
"mcp__magento-watch__get_security_bulletin",
"mcp__magento-watch__find_patch",
"mcp__magento-watch__get_patch",
"mcp__magento-watch__find_upstream_fix",
"mcp__magento-watch__get_upstream_fix"
],
"ask": [
"mcp__magento-watch__check_compatibility",
"mcp__magento-watch__check_version_security"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as magento-watch. Review it before you use it.