Server data from the Official MCP Registry
Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.
About
Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.
Security Report
This Shopify MCP server has solid authentication architecture with OAuth-based credentials handled via environment variables and proper lazy validation for tool introspection. However, there are moderate security concerns: sensitive data (Shopify store domain, client credentials) is logged via console.error in error handlers, broad API scopes are requested without per-tool scope validation, and some error messages expose internal API details. The server appropriately uses environment variables for secrets and includes reasonable input validation via Zod schemas. Supply chain analysis found 7 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.
3 files analyzed · 15 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: SHOPIFY_STORE_DOMAIN
Environment variable: SHOPIFY_CLIENT_ID
Environment variable: SHOPIFY_CLIENT_SECRET
Environment variable: SHOPIFY_API_VERSION
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-den-indance-shopify-mcp-pro": {
"env": {
"SHOPIFY_CLIENT_ID": "your-shopify-client-id-here",
"SHOPIFY_API_VERSION": "your-shopify-api-version-here",
"SHOPIFY_STORE_DOMAIN": "your-shopify-store-domain-here",
"SHOPIFY_CLIENT_SECRET": "your-shopify-client-secret-here"
},
"args": [
"-y",
"@den.dance/shopify-mcp-pro"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
Shopify MCP Pro
The working Shopify MCP server. Connect Claude to your Shopify store — products, orders, customers, inventory, analytics and more.
Most Shopify MCP packages have broken analytics (stubs that return wrong data), use deprecated API fields that crash at runtime, and require a static token that expires silently. This one doesn't.
Built by Denis Maleev.
Why this one
| What's fixed | Detail |
|---|---|
| Analytics tools were stubs | getSalesReport, getConversionReport, getTrafficReport now powered by ShopifyQL — real data |
| Auth that actually works | Uses Client ID + Secret from Shopify Dev Dashboard, tokens refresh automatically — no silent expiry |
| Deprecated API fields | getInventoryLevels, listAbandonedCheckouts updated to Shopify 2026-04 field schema |
| Runtime crashes | getShippingZones no longer crashes on stores with no delivery profiles |
New: runShopifyQL | Run any ShopifyQL query directly — same data as Admin → Analytics |
| Shopify Admin API | 2026-04 (current GA) + @shopify/shopify-api v13 |
Quick Start
npx @den.dance/shopify-mcp-pro
Setup
1. Create a Custom App in Shopify
- Go to your Shopify Admin → Settings → Apps and sales channels
- Click Develop apps (enable custom app development if prompted)
- Click Create an app, give it a name (e.g. "Claude MCP")
- Go to Configure Admin API scopes and select scopes you need (see list below)
- Click Install app
- Go to API credentials tab — you'll see Client ID and Client secret
Note: Shopify no longer shows a static access token by default. This server uses OAuth with Client ID + Secret.
2. Configure Claude Desktop
Edit your Claude Desktop config file:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json - Linux:
~/.config/Claude/claude_desktop_config.json
{
"mcpServers": {
"shopify": {
"command": "npx",
"args": ["@den.dance/shopify-mcp-pro"],
"env": {
"SHOPIFY_STORE_DOMAIN": "your-store.myshopify.com",
"SHOPIFY_CLIENT_ID": "your-client-id",
"SHOPIFY_CLIENT_SECRET": "your-client-secret",
"SHOPIFY_API_VERSION": "2026-04",
"SHOPIFY_LOG_LEVEL": "WARNING"
}
}
}
}
Restart Claude Desktop after saving.
Configure Claude Code
claude mcp add shopify -e SHOPIFY_STORE_DOMAIN=your-store.myshopify.com \
-e SHOPIFY_CLIENT_ID=your-client-id \
-e SHOPIFY_CLIENT_SECRET=your-client-secret \
-- npx @den.dance/shopify-mcp-pro
Environment Variables
| Variable | Required | Description |
|---|---|---|
SHOPIFY_STORE_DOMAIN | Yes | e.g. my-store.myshopify.com |
SHOPIFY_CLIENT_ID | Yes | From Shopify Dev Dashboard |
SHOPIFY_CLIENT_SECRET | Yes | From Shopify Dev Dashboard |
SHOPIFY_API_VERSION | No | Defaults to 2026-04 |
SHOPIFY_LOG_LEVEL | No | error, warning, info, debug (default: warning) |
TRANSPORT_MODE | No | stdio (default) or sse |
PORT | No | HTTP port for SSE mode (default: 3000) |
API Scopes
Minimum recommended
read_products,write_productsread_ordersread_customersread_inventory,write_inventory
For analytics
read_analyticsread_reports
Full feature set
read_draft_orders,write_draft_ordersread_fulfillments,write_fulfillmentsread_shippingread_marketing_events,write_marketing_eventsread_discounts,write_discountsread_price_rules,write_price_rulesread_themesread_content,write_contentread_metaobjects,write_metaobjectsread_gift_cards,write_gift_cards
You don't need all scopes — the server works with whatever you grant. Tools requiring missing scopes return auth errors without affecting others.
Tools
Products & Inventory
listProducts— list with filters, pagination, sortgetProduct— get by ID (includes inventory item IDs)createProduct,updateProductgetInventoryLevels— current stock across locationsadjustInventory— adjust quantitieslistCollectionssetMetafieldlistMetaobjectDefinitions,createMetaobject,listMetaobjects
Orders & Fulfillment
listOrders,getOrdercreateDraftOrder,listDraftOrderscreateFulfillment,listFulfillmentOrdersgetShippingZonescreateRefundlistTransactions
Customers & B2B
listCustomers,getCustomergetCustomerAnalyticscreateCompany,listCompanies
Financial
getFinancialSummarycreateGiftCard,listGiftCards
Marketing & Content
createDiscountCode,listDiscountslistPriceRulescreatePage,listPagescreateArticle,listBlogscreateRedirectcreateWebhook,listWebhooks
Analytics & Reporting
getSalesReport— revenue, orders, AOV (ShopifyQL)getProductAnalytics— top products by sales (ShopifyQL)getConversionReport— product conversion funnel (ShopifyQL)getTrafficReport— sales by referrer source (ShopifyQL)getAbandonmentReport— cart abandonment by date rangelistAbandonedCheckoutsgetMarketingReportgetCustomerAnalyticsrunShopifyQL— run any ShopifyQL query directly
Store Config
getShopInfolistThemeslistLocationslistMarketsgetInventoryReportgetCustomReport
ShopifyQL
runShopifyQL lets you run raw ShopifyQL queries — Shopify's native SQL-like analytics language:
FROM sales SHOW total_sales, gross_sales, total_orders SINCE '2026-01-01' UNTIL '2026-05-19'
FROM products SHOW total_sales BY product_title ORDER BY total_sales DESC LIMIT 10
FROM sessions SHOW sessions BY referrer_source
Requires read_reports scope + Level 2 customer data access in your Shopify app settings.
Example prompts for Claude
- "Show sales for last month broken down by product"
- "Which products have less than 10 units in stock?"
- "Create a 20% discount code valid until end of month"
- "List abandoned checkouts from the past week"
- "Run a ShopifyQL query: FROM sales SHOW total_orders SINCE -30d"
- "Get customer lifetime value metrics"
- "Show top 10 products by revenue this year"
SSE Mode
For HTTP-based access or cloud deployment:
TRANSPORT_MODE=sse \
SHOPIFY_STORE_DOMAIN=your-store.myshopify.com \
SHOPIFY_CLIENT_ID=your-client-id \
SHOPIFY_CLIENT_SECRET=your-client-secret \
PORT=3000 \
npx @den.dance/shopify-mcp-pro
Endpoints:
GET /sse— SSE streamPOST /messages?sessionId={id}— send messagesGET /health— health check
Configure Claude Desktop for remote SSE:
{
"mcpServers": {
"shopify-remote": {
"transport": {
"type": "sse",
"url": "https://your-server.com/sse"
}
}
}
}
Security
- Never commit credentials to version control
- Use environment variables for all secrets
- Create separate apps with minimal scopes for different use cases
- Regularly rotate your Client Secret
License
MIT
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.
