Shopify MCP Server

Shopify store management via 22 tools for products, orders, and customer data.

Data last scanned today · Reviewed today

242 dangerous tools22 tools18JavaScriptMIT

Overview

Shopify MCP Server provides a comprehensive interface for interacting with the Shopify Admin API. Through 22 integrated tools, it allows AI assistants to programmatically list, create, and modify store resources including products, variants, orders, and customer data. Beyond basic entity management, the server supports operational tasks such as updating inventory levels, fulfilling orders, and generating analytics reports. Configuration is handled via environment variables or command-line arguments using a secure Shopify access token and store domain.

Our verdict

This server carries a high-risk score of 24/100 and should be used with extreme caution. Notably, it lacks a read-only mode, meaning every installation is granted full write access to your store data. It is maintained by a single community contributor and has not been updated in nearly a year, making it unsuitable for sensitive production environments.

  • Provides 22 specific tools for comprehensive store operations
  • Uses only two direct dependencies for a lean codebase
  • MIT license provides clear open-source permissions
  • Lacks a read-only mode for restricted operations
  • High security risk due to no recent repository updates
  • Single-contributor project with no official vendor affiliation

Setup

Claude Desktop
{
  "mcpServers": {
    "shopify-mcp-server": {
      "args": [
        "-y",
        "@akson/mcp-shopify"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
list_productsList all products in your store with optional filters.low
get_productGet detailed information about a specific product.low
search_productsSearch for products by title.low
create_productCreate a new product in your store.medium
update_productUpdate an existing product.medium
delete_productDelete a product from your store.high
update_inventoryUpdate inventory levels for a specific variant.medium
list_ordersList all orders with optional filters.low
get_orderGet detailed information about a specific order.low
update_orderUpdate order information.medium

Compatibility

ClientLocalDockerRemoteRead-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

What are the system requirements for running this server?

You must have Node.js version 14.0.0 or higher installed, along with your Shopify store domain and a valid Admin API access token.

How do I provide my Shopify credentials to the server?

You can provide credentials either by setting the SHOPIFY_ACCESS_TOKEN and SHOPIFY_DOMAIN environment variables or by passing them as command-line arguments.

What permissions does my Shopify app need?

Your Shopify app must be configured with the necessary Admin API read/write scopes for the specific resources you intend to manage, such as products, orders, and customers.

What should I do if I encounter a 401 Unauthorized error?

Verify that your access token is correct, ensure that your app has the required API permissions, and check that the token has not expired.

Is it possible to use this server with Claude Desktop?

Yes, you can integrate it by adding the server configuration to your Claude Desktop config file and restarting the application.

Badge

Shopify MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.