Shopify
Shopify's official Dev MCP for app and storefront work: docs lookups, schema introspection, project scaffolding.
Delv Safety Grade: C
Score 62/100 · assessed 2026-04-28
Shopify's official MCP server provides legitimate access to store data through their standard API, backed by a major e-commerce platform with strong engineering practices. The maintainer score is excellent given Shopify's size and reputation. However, significant transparency and supply-chain concerns drag the overall grade down. There's no public repository, no package distribution, and the installation method is entirely unclear from the documentation. The permissions are broad, granting read and write access to products, orders, and customer data, which is appropriate for merchant automation but carries inherent risk. The requirement for SHOPIFY_ACCESS_TOKEN means credentials with potentially wide scope must be stored locally. Without visible source code, dependency pinning, or standard distribution channels, users cannot verify what they're running or track updates. This is unusual for an official vendor MCP and limits auditability despite Shopify's trustworthiness.
Lethal Trifecta (prompt-injection exposure)
TRIFECTA RISKCustomer data is private; product reviews and customer messages are mixed-trust; outbound is the entire admin API.
Green flags
- Official Shopify product from major established e-commerce vendor
- Uses standard Shopify API authentication patterns merchants already know
- Scoped to single store via SHOPIFY_STORE environment variable
- No known security incidents or credential leaks
- Purpose-built for legitimate merchant automation use cases
Red flags
- No public repository or source code available for inspection
- No package distribution via npm/pypi, unclear installation method
- Requires storing Shopify access token with potentially broad API scope
- Minimal documentation beyond basic setup, no changelog visible
- Cannot verify dependencies or supply chain without source access
Permissions requested
Review
Install this if you manage a Shopify store and spend time digging through orders, products, or customer records. Skip it if you don't have a store or if you're looking for write operations like inventory updates. The read-only limitation is real, but for querying and reporting, it's solid.
Good at
- Official Shopify build, so it tracks API changes and doesn't rely on third-party maintenance.
- Combines product, order, and customer queries in one server, which beats juggling multiple tools or browser tabs.
- Works well for custom reporting workflows that Shopify's native analytics don't cover.
- Supports all major MCP hosts, so you can use it in Claude Desktop, Cursor, or Windsurf without friction.
Watch out
- Read-only operations mean you can't automate order updates or product edits, which limits practical use cases.
- Requires creating a custom Shopify app and managing API tokens, which adds setup friction compared to simpler MCPs.
- Documentation assumes familiarity with Shopify's API structure, so first-time users may need to reference Shopify's developer docs.
- Error handling is minimal, so authentication issues can be cryptic to diagnose.
Getting started
Works with
Similar MCPs
- Lara Translate MCPProfessional translation with language detection, context-aware translations, translation memories, and glossaries.
- Make MCPTurns Make automation scenarios into callable tools for AI assistants, bridging 1,000+ apps through Make workflows.
- CCXT MCPCrypto exchange integration using CCXT, covering spot, futures, OHLCV, balances, and orders across 20+ exchanges.
- HubSpotHubSpot's MCP for CRM workflows: contacts, deals, tickets, properties. Distributed via NPM, see the developer docs for install steps.