Shopify Storefront MCP Server

The Shopify Storefront MCP Server is Shopify's official Model Context Protocol server for store-level commerce data. It connects AI assistants and shopping agents to the product catalog, cart, and policies of a specific Shopify store. Unlike the Shopify Dev MCP Server — which accesses developer documentation and API schemas — the Storefront MCP Server is designed for end-customer scenarios: a buyer asks a question about products, the agent searches the selected store's catalog, adds items to the cart, and guides the shopper through checkout. The official documentation page is https://shopify.dev/docs/apps/build/storefront-mcp.

What is the Shopify Storefront MCP Server?

The Storefront MCP Server provides, according to the provider, structured access to Shopify's commerce data: product search, cart operations, and queries about store policies. Each Shopify store has its own MCP endpoint at https://{shop}.myshopify.com/api/mcp. This endpoint is store-specific and covers all storefront commerce capabilities. The Shopify app that acts as the MCP client routes the AI model's requests to this endpoint; the Chat UI is embedded into the store's theme as a Shopify theme extension.

Architecture: MCP client, MCP server, and Chat UI

According to the provider, the system uses a client-server architecture following the Model Context Protocol: the MCP client is the Shopify app that connects with AI models and passes their requests to MCP servers. The MCP server is an API endpoint that provides structured access to commerce data such as products, cart operations, and customer information. The Chat UI is a Shopify theme extension that presents a customer-facing chat window. The backend acts as the MCP client while the frontend delivers the customer experience. This approach enables any AI model to be connected to Shopify without custom integration work.

Available tools

The Shopify Storefront MCP Server provides the following tools according to the official documentation:

search_catalog: Searches the store's product catalog for items matching the customer's needs. Supports free-text search, buyer signals (country, language, currency, purchase intent), filters by category and price range, and cursor-based pagination. This tool conforms to the UCP catalog specification and is available at https://{shop}.myshopify.com/api/ucp/mcp.

lookup_catalog: Retrieves products or variants by identifier. Useful when product or variant IDs are already available from search results, saved lists, or deep links. Supports up to ten IDs per request, buyer localization signals, and downstream filters.

get_product: Retrieves full details for a single product, with optional interactive variant selection. Appropriate when a buyer has selected a product and needs detailed information for a purchase decision. Supports variant selection and preference relaxation order.

search_shop_policies_and_faqs: Answers questions about the store's policies, products, and services to build customer trust. According to Shopify, only the provided answer should be used to form the response; external information may be inaccurate.

get_cart: Retrieves the current contents of a cart, including item details and checkout URL. Requires a cart ID.

update_cart: Updates quantities of items in an existing cart or adds new items. Creates a new cart if no cart ID is provided. Setting quantity to 0 removes an item.

Distinction: Storefront MCP vs. Dev MCP vs. Customer Accounts MCP

Shopify operates multiple MCP servers for different use cases. The Storefront MCP Server serves end-customer shopping scenarios: product search, cart, policies. It requires no authentication for the storefront endpoint. The Dev MCP Server (@shopify/dev-mcp) targets exclusively developers: it provides access to Shopify developer documentation and API schemas, not store data. The Customer Accounts MCP Server (https://{shopDomain}/customer/api/mcp) enables authenticated customer-specific actions such as order tracking and returns; it requires OAuth 2.0 with PKCE and access to protected customer data approved via the Shopify Partner Dashboard.

Setup for developers

Integrating a Storefront MCP Server into a custom Shopify app requires the following components: a Shopify app (Node.js recommended), a Shopify Partner account, a development store, and basic knowledge of MCP and Shopify app development. The endpoint is store-specific and takes the form https://{shop}.myshopify.com/api/mcp. For UCP catalog tools, the separate endpoint https://{shop}.myshopify.com/api/ucp/mcp applies, along with an agent profile header. The official guide recommends starting with the Shopify AI Toolkit at shopify.dev/docs/apps/build/devmcp for the developer onboarding path.

Security notes

The Storefront MCP Server requires no authentication for public store data according to the official documentation — product catalog and policies are publicly accessible by design. For the Customer Accounts MCP Server, OAuth 2.0 (authorization code flow with PKCE) is required, and the developer must request Level 2 protection for customer data (PII) through the Shopify Partner Dashboard. Shopify notes that individual stores may restrict access; therefore the integration should always be tested with the specific development store. By using the Shopify MCP servers, the developer agrees to Shopify's API terms of use according to the provider. Data retrieved by the AI agent is embedded in model requests; the AI model used and its privacy policy should be reviewed accordingly.

FAQ

Do end customers need a Shopify account? No. The Storefront MCP Server provides public product data; a Shopify customer account is only required for the Customer Accounts MCP Server, which manages order history and personal data.

Is the Storefront MCP Server free? The MCP endpoints are available as part of Shopify's Storefront API without additional cost. Costs arise from Shopify Partner plans, the chosen AI model provider, and potentially from Shopify app fees. Current pricing information is available at shopify.dev.

Is there a public GitHub repository? According to research conducted on 2026-09-08, no public repository exists under github.com/Shopify for this specific MCP server. The server is a cloud-hosted, store-specific endpoint without a separate open-source package.

What is the difference from the Shopify Storefront API? The Storefront API is a GraphQL API for direct queries. The Storefront MCP Server builds on the MCP standard and enables AI assistants to access the same commerce data with structured, tool-based calls, without the AI side needing to formulate GraphQL queries directly.

Shopify Partner account, Shopify app (Node.js recommended), development store, MCP-compatible AI client or custom app integration.

Configure the store-specific MCP endpoint https://{shop}.myshopify.com/api/mcp in your Shopify app as the MCP client. For UCP catalog tools, use the endpoint https://{shop}.myshopify.com/api/ucp/mcp. Full guide: shopify.dev/docs/apps/build/storefront-mcp.

No authentication for public storefront data (products, policies, cart). OAuth 2.0 with PKCE for the Customer Accounts MCP Server (orders, customer data).

Read access to public catalog and policy data; write access to carts. The Customer Accounts MCP Server requires Level 2 protected customer data (PII) approval.

The server is a cloud-hosted, store-specific endpoint operated by Shopify. Retrieved commerce data is embedded in the AI client's model requests. Customer data in the Customer Accounts MCP is protected by Shopify's privacy policies and OAuth.

Storefront endpoint: low risk profile for public data. Customer Accounts MCP: PII access requires OAuth 2.0 and Shopify approval. Retrieved data flows into model requests; review the AI model used and its privacy policy.