Mercur is an open source multi vendor marketplace platform where many independent sellers list their own products and fulfil their own orders under one storefront brand.
Mercur is an open source marketplace platform that turns a single commerce backend into a multi seller marketplace. Where a conventional store has one catalogue and one owner, Mercur adds the seller as a first class concept: vendors register, are approved by the marketplace operator, then manage their own products, offers, promotions, stock and orders from a dedicated vendor panel, while the operator oversees every seller, order and payout from a separate administration panel. It is built on the Medusa commerce engine, so the whole marketplace is exposed as a headless REST API that any storefront, mobile app or point of sale client can consume, and the commerce primitives underneath, regions, currencies, tax, shipping, promotions and carts, are the same battle tested ones a single seller store would use. That combination suits anyone building a curated marketplace, a B2B trading platform or a niche vertical marketplace who wants to own the platform outright rather than pay commission to a hosted service.
cloudimg compiles the marketplace API and both web panels ahead of time and bakes them into the image, so the appliance serves a working marketplace as soon as first boot finishes, with nothing to compile, download or configure on the instance. The image is secure by default: it carries no usable credential at all, the demo catalogue and its published seller login are never installed, and the marketplace service is gated so it cannot even start until first boot has generated a unique database password, a unique token signing secret and a unique cookie secret, and written a one off administrator password into a root only file. A start time guard rechecks this on every restart and refuses to run if any published default is ever in effect. The panels are re pointed at your own address automatically on first boot, and a bundled helper lets you move the appliance behind your own domain or TLS terminator later without a rebuild. The database and cache are bound to the loopback interface, the base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide, backed by 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.