Download the PHP package angeo/module-mcp-reorder without Composer

MCP Reorder for Magento 2 — Signed-in Buyer Tools (B2B)

Let an AI agent fill a buyer's cart from their order history — and leave checkout to the buyer.

Business buyers order the same things again and again. With this module, a buyer can tell Claude (or any MCP client) "order the same as last month, but double the gloves" or paste a list of SKUs. The agent reads their own orders, puts the lines in their own cart at their own prices, and reports what is out of stock or more expensive now. The buyer then checks out on your store as usual.

The tools never place an order. Payment, purchase orders, approvals and company rules stay exactly where they are today: in your checkout.

Extends angeo/module-mcp-server. For shoppers who are not signed in, see angeo/module-mcp-checkout.

Contents

• Tools
• How it works
• Security model
• Requirements
• Installation
• Configuration
• Connecting a signed-in buyer
• Adobe Commerce B2B
• Known limits

Tools

reorder_to_cart and add_items_to_my_cart take "preview": true: same result, prices and stock check, but the cart is not saved.

Two conversation starters (MCP prompts) are added for signed-in buyers: Reorder from {store} and Quick order at {store}.

Example flow:

How it works

• The buyer's normal cart. Changes go into the same active cart the buyer sees in the minicart when they log in. Nothing new to learn.
• Today's prices and rules. Lines are added with Magento's own reorder logic (the stored buy request), so options, variants and bundles come back as bought. Prices, tier prices, catalog rules and stock are today's, for the buyer's customer group.
• All or nothing per change. Lines are added, totals are collected, the limits are checked, and only then is the cart saved. If a limit is broken, nothing is saved.
• Partial success is reported. A line Magento rejects (out of stock, minimum quantity, no longer sold) is listed with the reason. The other lines still go in.

Security model

• Only for a verified buyer. The tools appear in tools/list only when the request carries a customer token that Magento's token services verified (see module-mcp-server: Signed-in customers). Anonymous and integration-only connections do not see them, and execute() refuses them anyway.
• No identity in arguments. No tool accepts a customer id, email or login. The buyer comes only from the verified token.
• Own data only. Order lookups are filtered by the buyer's id and by the store views of the current website. Someone else's order number looks exactly like one that does not exist.
• Narrow output. Orders show SKUs, names, quantities, prices and status. No addresses, email or payment data.
• Storefront rules for products. Disabled products, products of another website, and hidden products without a parent are refused — both in the cart and in get_my_prices, so prices of products a buyer cannot see on the store are not revealed. An old custom_price from an admin-created order is never carried over.
• Limits. Lines per call, quantity per line, lines in the cart, and an optional cart subtotal cap (base currency). All checked on the resulting cart, before saving.
• No order placement. There is no tool that places an order.
• Audit log. Every cart change is written to var/log/angeo_mcp_reorder.log: tool, customer id, store, line counts. No product data or prices.

Requirements

• Magento Open Source, Mage-OS or Adobe Commerce 2.4.6+
• PHP 8.1 – 8.5
• angeo/module-mcp-server ^2.4.0 (customer tokens, CallerContextInterface and account linking, which is how connectors such as Claude reach a signed-in buyer)

Installation

Then, in Stores → Configuration → Angeo → MCP Server:

1. Security → Accept Customer Tokens = Yes
2. Customer Account Tools → Enable = Yes

Test from the shell, as a real customer, without a token:

Configuration

Stores → Configuration → Angeo → MCP Server → Customer Account Tools

Reordering also follows Magento's own Sales → Reorder → Allow Reorder.

Connecting a signed-in buyer

The buyer's Magento customer token must reach /mcp:

• Through an MCP connector with account linking (how Claude connects, e.g. mcp.angeo.dev): the buyer signs in on your store and approves. The connector receives an MCP-only token (amc_…) that works at /mcp only, and sends it as X-Customer-Token next to its Integration token. See module-mcp-server: Account linking.
• Directly, for testing only (Claude Code, MCP Inspector). Turn on Security → Accept Storefront Customer Tokens (testing) first, and off again afterwards: an ordinary customer token was issued for REST and GraphQL, not for MCP.

Adobe Commerce B2B

The module works on Magento Open Source and Mage-OS with customer groups and tier prices. On Adobe Commerce with the B2B extension, carts are changed through the core cart (Quote::addProduct), so B2B rules that hook into the cart apply. Negotiable quotes, requisition lists and purchase-order approval are not touched: the buyer uses them at checkout as usual. Dedicated tools for requisition lists are planned as an optional adapter.

Known limits

• add_items_to_my_cart adds simple, virtual and configurable products. Bundles and grouped products: reorder them from a past order, or add them on the store.
• get_my_prices shows prices before cart rules and tax, in base currency. The cart total is final.
• A search by sku looks at the latest 100 orders.
• Multi-currency stores: price changes are only flagged when the order and the cart use the same currency.

License

MIT — see LICENSE.