Strider Walmart

Shop Walmart via Strider Labs MCP connector. Search products, check store inventory, add items to cart, manage pickup/delivery. Complete autonomous shopping...

Security Scan

The skill is internally consistent with a Walmart MCP connector that runs an npm package via npx, but it relies on executing third‑party npm code at runtime (npx) and lacks packaged code for review — review the referenced npm package and OAuth storage details before use.

Purpose & Capability

Name and description match the instructions: the SKILL.md documents an MCP connector for Walmart and instructs installing/running @striderlabs/mcp-walmart via npm/npx. Requesting the npx binary is proportional to this purpose.

Instruction Scope

Instructions stay within the connector scope (search, cart, checkout, inventory, OAuth flow). They do instruct installing and running a third‑party npm package and configuring an MCP client to invoke npx, but they do not ask the agent to read unrelated files or environment variables. The doc states tokens are "stored encrypted per-user" but gives no detail where/how they are stored — an implementation detail worth verifying.

Install Mechanism

This is an instruction-only skill but explicitly directs runtime execution of a remote npm package via npx (npx -y @striderlabs/mcp-walmart). Running npx will fetch and execute code from the npm registry on demand, which is a moderate-risk pattern because the actual code executed is not bundled with the skill and cannot be reviewed here.

Credentials

No environment variables or external credentials are declared or required in the SKILL.md; the connector uses an OAuth flow with per-user tokens, which is a reasonable design for a shopping connector. Verify where tokens are stored and encryption/rotation practices in the actual implementation.

Persistence & Privilege

The skill does not request always:true, does not modify other skills, and does not declare system-level config paths. It appears to run only when invoked by the MCP client and/or via the npm package it references.

Assessment

This skill appears to be a normal third‑party connector, but it relies on executing an npm package fetched at runtime via npx. Before installing or enabling it: (1) review the @striderlabs/mcp-walmart package on npm (and its repository) — check publisher, recent activity, and source code; (2) confirm where and how OAuth tokens are stored/encrypted and whether token scope is limited; (3) prefer installing and auditing the package yourself in a sandboxed environment (or run from a pinned, audited release) rather than allowing unrestricted npx downloads; (4) if you have sensitive saved payment methods, consider testing with a throwaway account first. If you cannot review the npm package or verify the maintainer, treat the runtime npx execution as a material risk.

Strider Walmart Connector

MCP connector for shopping at Walmart — search products, check inventory, manage cart, and order for pickup or delivery. Part of the Strider Labs action execution layer for AI agents.

Installation

npm install @striderlabs/mcp-walmart

MCP Configuration

Add to your MCP client configuration (Claude Desktop, Cursor, etc.):

{
  "mcpServers": {
    "walmart": {
      "command": "npx",
      "args": ["-y", "@striderlabs/mcp-walmart"]
    }
  }
}

Available Tools

walmart.search_products

Search Walmart's catalog by keyword, category, or brand.

Input Schema:

{
  "query": "string (search terms)",
  "category": "string (optional: grocery, electronics, home, etc.)",
  "sort": "string (optional: price_low, price_high, rating, relevance)",
  "store_id": "string (optional: for inventory check)"
}

Output:

{
  "products": [{
    "id": "string",
    "name": "string",
    "price": "number",
    "rating": "number",
    "in_stock": "boolean",
    "pickup_available": "boolean",
    "delivery_available": "boolean",
    "image_url": "string"
  }]
}

walmart.add_to_cart

Add products to shopping cart with specified quantity.

Input Schema:

{
  "product_id": "string",
  "quantity": "number",
  "fulfillment": "string (pickup or delivery)"
}

walmart.get_cart

Retrieve current cart contents and totals.

walmart.checkout

Complete purchase with saved payment method.

Input Schema:

{
  "fulfillment_type": "string (pickup or delivery)",
  "store_id": "string (for pickup)",
  "delivery_address": "object (for delivery)",
  "payment_method_id": "string"
}

walmart.check_inventory

Check real-time inventory at a specific store.

walmart.find_stores

Find nearby Walmart stores by location.

Authentication

First use triggers OAuth authorization flow:

1. User is redirected to Walmart to authorize
2. Tokens are stored encrypted per-user
3. Automatic refresh handles token expiration

No API key required — connector manages OAuth flow.

Usage Examples

Search for groceries:

Search Walmart for organic milk and add the best-rated one to my cart

Weekly grocery order:

Order my usual groceries from Walmart: eggs, bread, milk, bananas, chicken breast

Check pickup availability:

Is the PlayStation 5 available for pickup at my local Walmart?

Error Handling

Code	Meaning	Action
AUTH_EXPIRED	Session expired	Re-authenticate
OUT_OF_STOCK	Item unavailable	Suggest alternatives
STORE_UNAVAILABLE	Store closed	Try different store
RATE_LIMITED	Too many requests	Retry after delay

Use Cases

• Weekly grocery shopping: automate recurring orders
• Price comparison: search across categories
• Pickup coordination: find items available at nearby stores
• Bulk ordering: household supplies and pantry staples

Links

• npm: https://npmjs.com/package/@striderlabs/mcp-walmart
• Strider Labs: https://striderlabs.ai