Server data from the Official MCP Registry
Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.
Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.
This Shopify MCP server demonstrates solid security practices with proper authentication via OAuth (Client ID + Secret), appropriate input validation using Zod, and careful credential handling via environment variables. However, there are moderate concerns around error handling that could leak sensitive information, incomplete input validation in some tools, and missing rate-limiting protections that could expose the server to abuse. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
3 files analyzed · 14 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: SHOPIFY_STORE_DOMAIN
Environment variable: SHOPIFY_CLIENT_ID
Environment variable: SHOPIFY_CLIENT_SECRET
Environment variable: SHOPIFY_API_VERSION
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-den-indance-shopify-mcp-pro": {
"env": {
"SHOPIFY_CLIENT_ID": "your-shopify-client-id-here",
"SHOPIFY_API_VERSION": "your-shopify-api-version-here",
"SHOPIFY_STORE_DOMAIN": "your-shopify-store-domain-here",
"SHOPIFY_CLIENT_SECRET": "your-shopify-client-secret-here"
},
"args": [
"-y",
"@den.dance/shopify-mcp-pro"
],
"command": "npx"
}
}
}From the project's GitHub README.
The working Shopify MCP server. Connect Claude to your Shopify store — products, orders, customers, inventory, analytics and more.
Most Shopify MCP packages have broken analytics (stubs that return wrong data), use deprecated API fields that crash at runtime, and require a static token that expires silently. This one doesn't.
Built by Denis Maleev.
| What's fixed | Detail |
|---|---|
| Analytics tools were stubs | getSalesReport, getConversionReport, getTrafficReport now powered by ShopifyQL — real data |
| Auth that actually works | Uses Client ID + Secret from Shopify Dev Dashboard, tokens refresh automatically — no silent expiry |
| Deprecated API fields | getInventoryLevels, listAbandonedCheckouts updated to Shopify 2026-04 field schema |
| Runtime crashes | getShippingZones no longer crashes on stores with no delivery profiles |
New: runShopifyQL | Run any ShopifyQL query directly — same data as Admin → Analytics |
| Shopify Admin API | 2026-04 (current GA) + @shopify/shopify-api v13 |
npx @den.dance/shopify-mcp-pro
Note: Shopify no longer shows a static access token by default. This server uses OAuth with Client ID + Secret.
Edit your Claude Desktop config file:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json~/.config/Claude/claude_desktop_config.json{
"mcpServers": {
"shopify": {
"command": "npx",
"args": ["@den.dance/shopify-mcp-pro"],
"env": {
"SHOPIFY_STORE_DOMAIN": "your-store.myshopify.com",
"SHOPIFY_CLIENT_ID": "your-client-id",
"SHOPIFY_CLIENT_SECRET": "your-client-secret",
"SHOPIFY_API_VERSION": "2026-04",
"SHOPIFY_LOG_LEVEL": "WARNING"
}
}
}
}
Restart Claude Desktop after saving.
claude mcp add shopify -e SHOPIFY_STORE_DOMAIN=your-store.myshopify.com \
-e SHOPIFY_CLIENT_ID=your-client-id \
-e SHOPIFY_CLIENT_SECRET=your-client-secret \
-- npx @den.dance/shopify-mcp-pro
| Variable | Required | Description |
|---|---|---|
SHOPIFY_STORE_DOMAIN | Yes | e.g. my-store.myshopify.com |
SHOPIFY_CLIENT_ID | Yes | From Shopify Dev Dashboard |
SHOPIFY_CLIENT_SECRET | Yes | From Shopify Dev Dashboard |
SHOPIFY_API_VERSION | No | Defaults to 2026-04 |
SHOPIFY_LOG_LEVEL | No | error, warning, info, debug (default: warning) |
TRANSPORT_MODE | No | stdio (default) or sse |
PORT | No | HTTP port for SSE mode (default: 3000) |
read_products, write_productsread_ordersread_customersread_inventory, write_inventoryread_analyticsread_reportsread_draft_orders, write_draft_ordersread_fulfillments, write_fulfillmentsread_shippingread_marketing_events, write_marketing_eventsread_discounts, write_discountsread_price_rules, write_price_rulesread_themesread_content, write_contentread_metaobjects, write_metaobjectsread_gift_cards, write_gift_cardsYou don't need all scopes — the server works with whatever you grant. Tools requiring missing scopes return auth errors without affecting others.
listProducts — list with filters, pagination, sortgetProduct — get by ID (includes inventory item IDs)createProduct, updateProductgetInventoryLevels — current stock across locationsadjustInventory — adjust quantitieslistCollectionssetMetafieldlistMetaobjectDefinitions, createMetaobject, listMetaobjectslistOrders, getOrdercreateDraftOrder, listDraftOrderscreateFulfillment, listFulfillmentOrdersgetShippingZonescreateRefundlistTransactionslistCustomers, getCustomergetCustomerAnalyticscreateCompany, listCompaniesgetFinancialSummarycreateGiftCard, listGiftCardscreateDiscountCode, listDiscountslistPriceRulescreatePage, listPagescreateArticle, listBlogscreateRedirectcreateWebhook, listWebhooksgetSalesReport — revenue, orders, AOV (ShopifyQL)getProductAnalytics — top products by sales (ShopifyQL)getConversionReport — product conversion funnel (ShopifyQL)getTrafficReport — sales by referrer source (ShopifyQL)getAbandonmentReport — cart abandonment by date rangelistAbandonedCheckoutsgetMarketingReportgetCustomerAnalyticsrunShopifyQL — run any ShopifyQL query directlygetShopInfolistThemeslistLocationslistMarketsgetInventoryReportgetCustomReportrunShopifyQL lets you run raw ShopifyQL queries — Shopify's native SQL-like analytics language:
FROM sales SHOW total_sales, gross_sales, total_orders SINCE '2026-01-01' UNTIL '2026-05-19'
FROM products SHOW total_sales BY product_title ORDER BY total_sales DESC LIMIT 10
FROM sessions SHOW sessions BY referrer_source
Requires read_reports scope + Level 2 customer data access in your Shopify app settings.
For HTTP-based access or cloud deployment:
TRANSPORT_MODE=sse \
SHOPIFY_STORE_DOMAIN=your-store.myshopify.com \
SHOPIFY_CLIENT_ID=your-client-id \
SHOPIFY_CLIENT_SECRET=your-client-secret \
PORT=3000 \
npx @den.dance/shopify-mcp-pro
Endpoints:
GET /sse — SSE streamPOST /messages?sessionId={id} — send messagesGET /health — health checkConfigure Claude Desktop for remote SSE:
{
"mcpServers": {
"shopify-remote": {
"transport": {
"type": "sse",
"url": "https://your-server.com/sse"
}
}
}
}
MIT
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.