Strider Lowes

Shop Lowe's home improvement via Strider Labs MCP connector. Search products, check inventory, compare prices, and order building materials, tools, and appli...

Security Scan

The skill is internally consistent for a Lowe's MCP connector: it only requires npx and directs the agent to install/run an npm package; nothing requested appears disproportionate to the described retail shopping purpose.

Purpose & Capability

Name and description (Lowe's shopping via a Strider MCP connector) align with the declared requirement for npx and the SKILL.md instructions to install/run @striderlabs/mcp-lowes. No unrelated credentials, binaries, or config paths are requested.

Instruction Scope

SKILL.md stays on-task (install package, configure MCP, list tool schemas). It references an OAuth flow for user authentication but does not provide implementation details (where tokens are stored, redirect URIs). The instructions do not ask the agent to read unrelated files or env vars.

Install Mechanism

The skill is instruction-only but instructs use of npm install and npx -y @striderlabs/mcp-lowes. Using the public npm registry is expected for this kind of connector, but npx downloads and runs remote code at runtime (moderate risk). Consider pinning package versions and verifying the package's npm/author reputation to reduce typosquatting or supply-chain risk.

Credentials

No environment variables or external credentials are required in the registry metadata. OAuth-based authentication (per-user tokens) is appropriate for a shopping connector, but the skill's note that tokens are "stored encrypted per-user" lacks detail about storage location and key management — reasonable but worth verifying in the implemention.

Persistence & Privilege

The skill does not request always:true and is user-invocable. It asks the integrator to add an MCP client entry (expected). There is no evidence it requests broad or persistent system-level privileges.

Assessment

This skill appears coherent for a Lowe's shopping connector, but before installing: 1) Verify the npm package (@striderlabs/mcp-lowes) page, publisher, download counts, and source code to reduce supply-chain/typosquatting risk. 2) Prefer pinning a specific package version rather than running npx -y which fetches the latest code. 3) Confirm how the connector stores OAuth tokens (where and how they are encrypted) and that redirect endpoints are legitimate. 4) If unsure, test in an isolated environment or review the package source prior to trusting it with your account. If any of these signals don’t check out, treat it as higher risk.

Strider Lowe's Connector

MCP connector for Lowe's home improvement shopping. Part of the Strider Labs action execution layer for AI agents.

Installation

npm install @striderlabs/mcp-lowes

MCP Configuration

Add to your MCP client configuration (Claude Desktop, Cursor, etc.):

{
  "mcpServers": {
    "lowes": {
      "command": "npx",
      "args": ["-y", "@striderlabs/mcp-lowes"]
    }
  }
}

Available Tools

lowes.search_products

Search Lowe's catalog for products.

Input Schema:

{
  "query": "string",
  "category": "string (optional)",
  "brand": "string (optional)",
  "price_min": "number (optional)",
  "price_max": "number (optional)"
}

Output:

{
  "products": [{
    "item_number": "123456",
    "name": "DeWalt 20V MAX Drill",
    "price": 149.00,
    "rating": 4.7,
    "reviews_count": 2341,
    "in_stock": true,
    "image_url": "https://..."
  }]
}

lowes.check_store_inventory

Check product availability at local stores.

Input Schema:

{
  "item_number": "string",
  "zip_code": "string",
  "radius_miles": "number (optional)"
}

lowes.get_product_details

Get detailed product information.

Input Schema:

{
  "item_number": "string"
}

lowes.add_to_cart

Add item to shopping cart.

Input Schema:

{
  "item_number": "string",
  "quantity": "number"
}

lowes.checkout

Complete the purchase.

Input Schema:

{
  "delivery_type": "pickup | delivery",
  "store_id": "string (for pickup)",
  "address": "object (for delivery)"
}

Authentication

First use triggers OAuth authorization:

1. User redirected to Lowe's login
2. Tokens stored encrypted per-user
3. Automatic refresh handles expiration

No API key required — connector manages OAuth flow.

Usage Examples

Search for tools:

Find cordless drills under $150 at Lowe's

Check availability:

Is the DeWalt drill in stock at my local Lowe's?

Compare products:

Compare Lowe's power washers by rating and price

Order materials:

Order 10 sheets of 4x8 plywood for delivery

Error Handling

Code	Meaning	Action
AUTH_EXPIRED	Session expired	Re-authenticate
OUT_OF_STOCK	Item unavailable	Check other stores
ITEM_NOT_FOUND	Invalid item number	Search again
DELIVERY_UNAVAILABLE	Can't deliver to address	Try pickup

Use Cases

• Project supplies: order lumber, drywall, and materials
• Tool shopping: compare and buy power tools
• Appliance purchase: shop washers, dryers, refrigerators
• Inventory check: verify stock before driving to store
• Pro purchasing: bulk orders for contractors

Links

• npm: https://npmjs.com/package/@striderlabs/mcp-lowes
• Strider Labs: https://striderlabs.ai