shopify-operations-mcp runs on your own machine — the client starts it, so there is no endpoint to ping. 50 installs a week from npm. Last commit 5 Sep 2026.
Safe-write Shopify operations: plan-before-execute writes with out-of-band approval and audit.
Today is the operative word: we check shopify-operations-mcp every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add shopify-operations-mcp -- npx -y shopify-operations-mcp
{
"mcpServers": {
"shopify-operations-mcp": {
"args": [
"-y",
"shopify-operations-mcp"
],
"command": "npx"
}
}
}
[mcp_servers.shopify-operations-mcp]
command = "npx"
args = ["-y", "shopify-operations-mcp"]
{
"mcpServers": {
"shopify-operations-mcp": {
"args": [
"-y",
"shopify-operations-mcp"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"shopify-operations-mcp": {
"args": [
"-y",
"shopify-operations-mcp"
],
"command": "npx"
}
}
}
This one needs environment variables set before it will start:
SHOPIFY_STORE_DOMAIN (The myshopify.com store domain, e.g. my-store.myshopify.com. Overrides shopify.storeDomain from the config file.), SHOPIFY_ADMIN_TOKEN (Shopify Admin API access token. Required and only ever read from the environment — never from the config file.), SHOPIFY_CONFIG (Path to a config.json with shopify/plans/approvalServer/protectedTags settings. Defaults to ./config.json in the working directory.), SHOPIFY_PLAN_TTL_MS (How long a plan token stays valid before it must be executed or expires, in milliseconds. Default 60000.), SHOPIFY_APPROVAL_SERVER_PORT (Port the localhost human-approval HTTP server binds to (127.0.0.1 only). Default 4319.), SHOPIFY_PROTECTED_TAGS (Comma-separated tags that plans may never modify; any plan touching an item carrying one is refused. Default do-not-touch.), SHOPIFY_CALLER_ID (Identity recorded as the caller on every audit log row. Default unknown.), SHOPIFY_AUDIT_PATH (File path for the tamper-evident JSONL audit log. Default shopify-operations-audit.jsonl in the working directory.).
The author declared them in the registry entry; get the values from the project itself.
Agent governance with A2A/Shopify/MCP trust audits, action screening, and decision UI.
MCP server for Shopify Admin API with a ComfyUI bridge for AI product image generation.
Shop connected e-commerce stores: search, compare, cart, and checkout with buyer approval.
Build bundles and cart drawers for your Shopify store with Section Store.
Control Shopify Admin tasks with agents or via prompt. Ultra slim integration, fast and secure.
GEO audit for Shopify: AI readiness score, recommendations, and 15 vertical checklists.
Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.
Free SEO & AI-search (AEO) audits for any site or Shopify store, with emailed weekly score reports.
Answers built from our own checks of this server.