RELATED 01
Shopify MCP Server
Read and edit a Shopify store's products, customers and orders through the GraphQL Admin API
239GitHub stars
2.4k/wknpm downloads
57popularity score
Shopify remote MCP
Shopify's hosted endpoint for building a new store or running an existing one over OAuth
Official · shopify.com Remote (hosted) · Streamable HTTP E-commerce
Connect your client
Remote (hosted)
Add in one click
Opens the app, which asks before it adds the server.
Or add it by command or config
CursorCursor mcp.json; the Shopify plugin (/add-plugin shopify) adds it
{
"mcpServers": {
"shopify": {
"type": "http",
"url": "https://setup.shopify.com/mcp",
"auth": { "CLIENT_ID": "2a457b21c946d5bc8d1675d1b3b8c2d6" }
}
}
}What it does
This is a remote MCP endpoint run by Shopify at setup.shopify.com/mcp. Nothing is installed: a client connects over HTTP and the merchant signs in to Shopify through OAuth in the browser. Shopify's AI Toolkit wires its Cursor plugin to this address (CHANGELOG 2.1.0 calls it Shopify's remote MCP), and the plugin's description says what it is for: setting up a new store from a description of what you sell and adding products, or connecting a store you already have to adjust inventory across locations, create discount codes, look at orders and customer details and read performance analytics.
The endpoint's own sign-in metadata (/.well-known/oauth-protected-resource) shows how far the grant reaches. It points to the authorization server at setup.shopify.com/auth, takes the token as a bearer header, and lists 35 scopes. Six are read-only (read_all_orders, read_analytics, read_apps, read_companies, read_legal_policies, read_reports); the other 29 are write scopes covering products, inventory, orders and order edits, draft orders, customers, discounts and price rules, fulfillments, returns, shipping, themes, files, online store content and navigation, markets, translations and checkout branding.
Shopify does not publish a tool list or a reference page for this endpoint in the pages read here; its developer docs for the AI Toolkit describe the separate Dev MCP package instead.
What it needs
A Shopify account and either an existing store or the will to create one, a client that speaks remote MCP over HTTP with OAuth sign-in (Shopify's own config targets Cursor), and a browser to complete the Shopify sign-in. No local runtime is needed.
Limits
Shopify publishes no tool list, rate limits or reference page for this endpoint; the only first-party mentions are the Cursor plugin config and a changelog line in the AI Toolkit repository. Its Cursor config carries a fixed OAuth client id, so clients other than the ones Shopify configures may not be accepted. The scopes in the sign-in metadata name what the grant can reach, not which tools exist. It is not the Shopify Dev MCP (@shopify/dev-mcp), which Shopify's AI Toolkit docs describe as covering documentation, API schemas and code validation.
Who it suits
Merchants who want an assistant to set up or run a Shopify store (products, inventory, discounts, orders, analytics) without creating a custom app or handling access tokens, and who use a client Shopify configures, such as Cursor. Because the grant includes broad write scopes on live store data, a developer who only needs Shopify API documentation and schema lookups is better served by Shopify's Dev MCP (@shopify/dev-mcp), which we also list and which its docs describe as documentation, API schema lookup and code validation. Anyone who needs a documented tool list or control over the token may prefer a self-run server with a custom app token.