Aimeos 2026.10: MCP tools for Laravel e-commerce

Aimeos is an open-source e-commerce framework for Laravel applications. Version 2026.10 adds MCP tools that let AI agents search products, update orders and manage customers in your shop.

An agent could retrieve selected products, draft improved descriptions and save the changes after your approval. Aimeos provides the tools for reading and updating shop data; your integration handles the agent workflow and approval step.

What's new

MCP tools for AI agents

Model Context Protocol (MCP) gives AI applications a standard way to discover and call tools. The new ai-admin-mcp extension provides tools for more than 20 shop domains, including products, categories, orders, customers and stock. Depending on the domain, agents can search and aggregate records, save and delete items, and change category trees.

composer require aimeos/ai-admin-mcp

Each tool validates its arguments and checks permissions using the Aimeos context supplied by your integration. In admin/mcp/resource you configure which user groups may call which tool.

The package doesn't include an MCP transport or SDK. Each tool exposes an input schema and returns its results as PHP arrays.

Your integration registers the tool definitions with an MCP server and routes calls to their execution methods. Expose only the tools you need. The MCP package README shows how to retrieve the tool catalog, inspect definitions and execute calls.

WebMCP in the storefront

WebMCP is a proposed browser standard that lets websites describe actions for AI agents. The Aimeos storefront now uses it on the forms for addresses, saved baskets, coupons and product watch lists. Browser agents that support WebMCP can fill these forms for the customer. Few browsers support it yet, and for regular visitors the forms work as before.

Choose an AI provider for each task

In the admin backend, you can write and translate texts, generate images and remove image backgrounds with AI. In 2026.10, these features use Prisma (aimeos/prisma), our PHP library for AI providers. You can configure a different provider and model for each task. Switching providers later is a configuration change.

Imports and exports

Customer, product, category and supplier imports can combine file data with configured values. For example, set a fixed product.status in the import mapping and omit the repetitive status column from your CSV.

Order, product and subscription exports can be extended with project-specific data before the files are written, for example fields your ERP or CRM system expects.

Framework support

Laravel 10 to 13 remain supported, Symfony 8 and TYPO3 14 are now supported too.

Security hardening

• Customer password hashes are excluded from loaded customer items and API responses. Admin APIs apply tighter checks to shared items and customer group assignments.
• HTML sanitization and output encoding strengthen XSS protection. Remote image and CMS media fetching blocks internal addresses to protect against SSRF.
• Checkout steps require POST requests. Guest orders can't be linked to existing accounts by e-mail, and site settings can't overwrite internal configuration keys.

For published vulnerabilities and affected versions, see the core security advisories.

How Aimeos fits into your application

You can install Aimeos (LGPLv3) into an existing Laravel application as a Composer package. It uses your routes, middleware, authentication, queues and Blade views.

Use the JSON:API for a custom frontend, or start with the server-rendered HTML components included with Aimeos. GraphQL and now MCP cover administration.

Aimeos is multi-vendor, multi-language, and multi-currency capable so you can run several shops with their own catalogs, prices, languages and currencies.

Aimeos is self-hosted, so you control your shop database and hosting, with no Aimeos fees per transaction. Data sent to external AI services depends on the provider and features you configure.

Get started

You can install different packages, depending on your needs:

# Full shop system
composer create-project aimeos/aimeos

# Headless API
composer create-project aimeos/aimeos-headless

# Laravel package only
composer require aimeos/aimeos-laravel

• New to Aimeos? Follow the Laravel setup guide or explore the demo shop.
• Upgrading an existing shop? Read the upgrade guidance before updating your dependencies.
• Building an agent integration? Install aimeos/ai-admin-mcp and use the tool catalog example to connect the tools to your MCP server.

You can find the application source on GitHub.

If you like Aimeos, give it a star! :-)