Shopify MCP + Claude

    Shopify MCP and Claude Shopify Integration: Servers, Setup and Review Gates

    For Shopify brands and their developers deciding how Claude should connect to the store, with which permissions, and where a person approves each change.

    Book a scoping call Read the ROAM Luggage case

    Shopify MCP and Claude: three routes to connect a store

    Claude connects to a Shopify store through three routes: Shopify's connector for Claude, the Shopify Dev MCP server for Claude Code, or a custom workflow with review gates. Shopify's guidance is to use the official integration for each AI tool rather than creating an API access token to connect one. As of October 2026:

    • Shopify connector for Claude. Made by Shopify and in Claude's connector directory since April 2026. A signed-in user manages products, collections, inventory and discounts, and reads orders, customers and analytics, from a Claude chat.
    • Shopify Dev MCP server and AI Toolkit. For developers in Claude Code: current Shopify docs, API schemas, code validation and store tasks through Shopify CLI.
    • A custom workflow. For work that runs from a request queue across Slack, email and other systems, with approvals your team controls. This is what we built for ROAM Luggage.

    If MCP is new to you, start with MCP vs API.

    Shopify MCP servers (as of October 2026)

    Shopify's MCP servers fall into two groups: servers that help you manage or build the store, and Universal Commerce Protocol (UCP) servers that let shopping agents browse and buy. In 2026 Shopify moved catalog tools (April 22) and cart tools (deprecated June 24, kept until August 31) from the Storefront MCP endpoint to the UCP endpoint. Sources: shopify.dev and the Shopify Help Center.

    ServerWhat it doesAuthRead or write
    Shopify connector for Claude (setup.shopify.com/mcp)Store management from a Claude chat: products, collections, inventory and discounts, plus orders, customers and analyticsInstall from Claude's connector directory, then approve access in the Shopify admin; capped by the staff account's permissionsRead-only unless you approve write access; orders, customers and analytics stay read-only
    Dev MCP server (@shopify/dev-mcp)Shopify docs, API schemas and code validation for Claude Code and other AI coding tools; part of the Shopify AI ToolkitNone; runs locallyReads Shopify docs and schemas; store tasks run separately through Shopify CLI when you choose
    Storefront Catalog MCP ({shop}/api/ucp/mcp)Search one store's catalog and fetch product detailsUCP agent profile on every requestRead
    Global Catalog MCP (catalog.shopify.com/api/ucp/mcp)Product search across Shopify merchantsUCP agent profile; optional buyer-linked token for personalized resultsRead
    Cart MCP ({shop}/api/ucp/mcp)Create, get, update and cancel cartsNo token needed; UCP agent profile on every request; idempotency key to cancelWrite
    Checkout MCP ({shop}/api/ucp/mcp)Create, update, complete and cancel checkoutsBearer token from Dev Dashboard client credentials (60-minute expiry) or signed requests, plus the agent profileWrite; can place orders
    Order MCP ({shop}/api/ucp/mcp)Current state of an order your agent placedBearer token with an orders scope, agent profile and buyer IP header; token-tier agents onlyRead
    Customer Accounts MCP ({shop}/customer/api/mcp)A signed-in customer's orders and account detailsOAuth 2.0 with PKCE; needs a custom domain and Shopify's protected customer data requirementsCustomer-scoped; tools are listed at connect time
    Storefront MCP, legacy ({shop}/api/mcp)Now only the shop policies and FAQs toolNoneRead

    What you can automate with Claude and Shopify

    The Claude Shopify jobs Operator Intelligence scopes most often.

    Sales and inventory questions

    Sales by collection, low-stock bestsellers or discount results. Through Shopify's connector, analytics, orders and customers are read-only.

    Catalog updates

    Product copy, collections, metafields, inventory and percentage-off discount codes, drafted from your product data and confirmed before they apply.

    Theme and section work

    Claude Code with Shopify's AI Toolkit builds and validates Liquid sections in a development or unpublished theme.

    Learn more

    A site-change queue

    Requests from Slack or email become tasks, AI prioritizes them and Claude executes each in a development theme for a person to publish.

    Learn more

    Shopify Dev MCP and Claude Code for theme and app work

    The Shopify Dev MCP server is Shopify's MCP server for developers. It runs locally, needs no authentication and gives Claude Code current Shopify documentation and API schemas instead of whatever the model remembers. Shopify packages it in the Shopify AI Toolkit, which also validates GraphQL, Liquid and extension code and can run supported store tasks through Shopify CLI when you choose. Shopify recommends the Claude Code plugin install, since plugins update automatically.

    We run theme changes in a development or unpublished theme, validate before review, and leave publishing to a named person. To run Claude Code in-house, see our Claude Code training.

    Permissions, scopes and security for a Claude Shopify integration

    The connector controls below come from Shopify's Help Center as of October 2026. The custom-build controls are what Operator Intelligence adds.

    ControlShopify connector for ClaudeCustom workflow we build
    Access levelRead-only unless you approve write access at setupRead scopes first; write scopes only for change types in scope
    Reducing accessCan't be lowered after approval: uninstall, then reinstall at the lower levelScopes changed in the app configuration and reviewed with you
    RevokingUninstall the integration from the Shopify adminUninstall the app and rotate credentials
    Blocked actionsRefunds, order cancellation or capture, returns, gift cards, and plan, payment, tax or domain settings, even with write accessAnything outside the change types in scope
    Theme safetyCan edit an unpublished theme, but not the live theme; can't publish or delete themesChanges only in a development theme; the agent has no publish rights
    Audit trailYou stay responsible for changes the tool makesEvery request, diff, approver and time logged
    Data handlingShared data is processed by the AI provider under its terms, not by ShopifyBusiness-tier Claude accounts and the minimum data each task needs

    Example: ROAM Luggage's Claude and Shopify workflow

    ROAM Luggage cut critical Shopify updates from days to minutes with a Claude and MCP workflow Operator Intelligence built in six weeks. ROAM, a premium DTC luggage brand, used to wait days for its web agency to make routine Shopify updates. Now the team Slacks or emails a requested change, a custom n8n workflow saves it to a task repository, AI prioritizes the queue, and Claude executes each change via MCP inside a Shopify development theme. A ROAM team member reviews and publishes.

    Ongoing website management costs fell by more than 90% because the workflow replaced the agency retainer. Read the ROAM Luggage case study, see the full agentic Shopify management service, or the wider Shopify marketing agency work for DTC brands.

    Shopify is a trademark of Shopify Inc. Operator Intelligence is an independent consultancy.

    Anthropic's commerce agents blueprint and Shopify

    Anthropic published a reference blueprint for commerce agents built on Claude on September 2, 2026, with Apache 2.0 code in its commerce-agents repository. It pairs a shopping agent that a business embeds for customers with a merchant agent staff use for analytics, listings, inventory alerts, pricing and campaign drafts.

    For how shopping agents find and buy products, see what is agentic commerce.

    Two design choices match how we build Shopify agents:

    • Writes wait for a person. Every merchant write is staged until a person approves it; nothing places an order, charges a card or changes a live listing.
    • The shopping agent stops at the cart. Payment stays with the merchant's checkout or a payments provider.

    The blueprint ships no Shopify connector; a platform's own MCP server can be called from its backend layer. Anthropic calls it a reference implementation it doesn't maintain, and its examples have no authentication, so production use needs auth, scopes and your business rules. Our custom AI agent development work covers that last mile.

    How we set up a Claude Shopify integration

    1. Map the jobs

      List the Shopify tasks your team wants Claude to handle and sort them into read, draft and change.

    2. Pick the route

      Shopify's connector, Claude Code with the AI Toolkit, a custom workflow, or a mix.

    3. Set access

      Read-only first, write access only where a job needs it, under the right staff account or app.

    4. Add review gates

      Development or unpublished themes, confirmation on each change and a named publisher.

    5. Test on real requests

      Last month's change requests, plus hostile inputs such as instructions hidden in a product review.

    6. Hand over

      A runbook, change log, training and an owner who checks it weekly.

    Frequently asked questions

    Is there an official Shopify MCP server for Claude?

    Yes, more than one. Shopify's connector for Claude handles store management from chat, the Shopify Dev MCP server gives Claude Code Shopify docs and API schemas, and Shopify's UCP catalog, cart and checkout MCP servers serve shopping agents. As of October 2026, Shopify's catalog and cart MCP servers need only a UCP agent profile, while Checkout MCP and Order MCP need a bearer token.

    Can Claude edit our live Shopify theme?

    Not through Shopify's connector, which can change an unpublished theme but can't edit the live theme, publish or delete one. In our custom builds, Claude works in a development theme and a person publishes.

    Which Claude plan do we need?

    Free accounts are limited to one custom connector. On Team and Enterprise, only Owners (and Enterprise roles with library access) can add custom connectors, and admins can restrict each connector's actions, such as reads without writes.

    Does Shopify charge for the Claude connector?

    Shopify says the connector carries no extra Shopify fee; your Claude subscription is separate. Our setup and custom workflows are scoped as projects; request a scoped proposal.

    Can Claude Code push changes to our store?

    With Shopify's AI Toolkit, Claude Code can run store tasks through Shopify CLI's signed-in session when you choose. We keep theme work in development or unpublished themes, and a person publishes.

    Connect Claude to Shopify, with a person on the publish button

    Tell us which Shopify jobs you want Claude to take on, and we'll show you the right route and where the review gates go. Or browse other AI integrations.

    Book a scoping call

    Sources

    1. Anthropic, Claude connector directory (2026): Shopify connector for Claude: made by Shopify, Anthropic verified, added April 2026, connector URL setup.shopify.com/mcp; tools include list-orders, run-analytics-query, create-product, set-inventory, create-discount
    2. Shopify Help Center, Shopify connector for Claude (2026): Shopify connector for Claude manages products, collections, inventory, orders (read-only), customers (read-only), discounts and analytics (read-only); blocked even with write access: refunds, cancel or capture orders, mark as paid, returns, gift cards; can't create fixed-amount discounts or change existing codes; can change an unpublished theme but not the live theme, publish or delete; no extra Shopify fee
    3. Shopify Help Center, Authorizing AI tool access (2026): Two-step authorization; read-only vs write access; limited by user permissions; can't lower an approved access level (uninstall and reinstall); revoke by uninstalling; use the official integration rather than an API access token
    4. Shopify Help Center, Considerations for AI tools (2026): Data shared with a third-party AI tool is no longer processed by Shopify; merchant is responsible for incorrect changes; tool can't change plan, payments, taxes or domains
    5. Shopify developer docs, Dev MCP server (2026): Dev MCP server runs locally and doesn't require authentication; supported in Claude Code, Codex CLI, Cursor, VS Code; package @shopify/dev-mcp
    6. Shopify developer docs, AI Toolkit (2026): Shopify AI Toolkit connects AI coding tools to docs, API schemas, code validation (GraphQL, Liquid, extensions) and CLI store management; plugin install recommended because plugins update automatically; doesn't remove the need to review and test
    7. Shopify developer docs, Storefront MCP (2026): Storefront MCP catalog and cart tools removed from /api/mcp and moved to UCP at /api/ucp/mcp (catalog and cart tools; agent profile on every request); policy and FAQ tool remains; Checkout MCP requests must be authenticated or signed
    8. Shopify developer docs, Shopify CLI theme dev (2026): shopify theme dev uploads the theme as a development theme for preview; development themes are deleted on shopify auth logout
    9. Anthropic Help Center (2026): Free users limited to one custom connector; on Team only Owners and Primary Owners can add custom connectors; on Enterprise also custom roles with Manage access to Libraries
    10. Anthropic (claude.com blog) (2026): Admins can restrict which actions are available within each MCP connector, e.g. allowing read access but disabling write operations (April 9, 2026)
    11. Shopify developer changelog (2026): Storefront Catalog MCP now implements UCP at https://{storedomain}/api/ucp/mcp with search_catalog, lookup_catalog and get_product; old versions maintained until June 15, 2026 (April 22, 2026)
    12. Shopify developer changelog (2026): Storefront MCP get_cart and update_cart deprecated in favor of UCP Cart MCP at https://{shop-domain}/api/ucp/mcp; maintained until August 31, 2026 (June 24, 2026)
    13. Shopify developer docs, Storefront Catalog MCP (2026): Storefront Catalog MCP: POST https://{storedomain}/api/ucp/mcp; tools search_catalog, lookup_catalog, get_product; every request must include a meta.ucp-agent.profile URL
    14. Shopify developer docs, Global Catalog MCP (2026): Global Catalog MCP at https://catalog.shopify.com/api/ucp/mcp searches products across all Shopify merchants; agent profile required; buyer-linked token optional for personalized results
    15. Shopify developer docs, Cart MCP (2026): Cart MCP at /api/ucp/mcp: create_cart, get_cart, update_cart, cancel_cart; agent profile; idempotency key for cancel_cart
    16. Shopify developer docs, Checkout MCP (2026): Checkout MCP at https://{shop-domain}/api/ucp/mcp: create_checkout, get_checkout, update_checkout, complete_checkout, cancel_checkout; JWT bearer token from Dev Dashboard client credentials with 60-minute TTL, or HTTP Message Signatures; agent profile required
    17. Shopify developer docs, Order MCP (2026): Order MCP at /api/ucp/mcp: get_order for orders the agent placed; bearer token with read_global_api_orders scope, agent profile and Shopify-Buyer-IP header; Token-tier agents only; read-only
    18. Shopify developer docs, Customer Accounts MCP (2026): Customer Accounts MCP endpoint discovered via /.well-known/customer-account-api (example https://{shopDomain}/customer/api/mcp); OAuth 2.0 authorization code with PKCE; requires a custom domain and protected customer data requirements
    19. Shopify developer docs, Policy and FAQs tool (2026): Policy and FAQs tool available at https://{storedomain}/api/mcp; no authentication required
    20. Anthropic (claude.com blog) (2026): Building commerce agents with Claude (September 2, 2026): reference shopping agent and merchant agent; merchant agent changes need a person's approval before going live; shopping agent hands the cart to checkout, payment left to the merchant's checkout or an agentic payments provider
    21. Anthropic (GitHub) (2026): anthropics/commerce-agents: Apache License 2.0; reference implementation, not maintained; every merchant write is staged until a person approves it; nothing places an order, charges a card or changes a live listing; no MCP connectors ship, a platform's own MCP server can be called from a backend method; examples have no authentication

    Related

    Agentic Shopify management

    Claude agents working your store's change queue.

    ROAM Luggage case study

    Days to minutes for critical site updates.

    Shopify Sidekick vs custom AI agents

    When Shopify's built-in assistant is enough.

    Custom MCP server development

    Scopes, logging and review gates for any system.

    Jewelry website design

    Shopify builds for DTC jewelry brands.

    Claude for business

    Claude implementation for lean teams: Projects, Skills, connectors and MCP.

    Shopify CRO

    Evidence-ranked tests whose winners ship through a development theme.