Shopify MCP is not one product. Shopify runs several servers that use the Model Context Protocol (MCP), the open standard that lets an AI app such as Claude, ChatGPT, Cursor, or Claude Code call tools on another system. Some of these servers help developers write Shopify code. Some let shopping agents search a catalog and check out. One lets a merchant manage a store from a chat.
If you searched for “Shopify MCP”, you probably want one of those three jobs. This guide explains which server does which job, what each one can and cannot change, and what to check before you give any AI app access to your store.
Disclosure: Runner AI publishes this guide, and Runner AI is a store platform that competes with Shopify. The Shopify details come from the Shopify connector for Claude help page, the Dev MCP server page, and the Storefront MCP page, all retrieved on November 13, 2026. The Runner details come from source code, interface text, and the live server metadata on the same date. Names, limits, and availability can change.
Key Takeaways
- “Shopify MCP” covers three different jobs: helping developers write code, letting shopping agents buy, and letting merchants manage a store from an AI app.
- The Dev MCP server runs on your own computer and reads Shopify’s docs and API schemas. It does not read your store’s live data.
- The Storefront MCP servers are for agents that shop: search the catalog, build a cart, and start checkout. They do not manage the store.
- The Shopify connector for Claude manages products, collections, inventory, and discount codes. Shopify’s help page says it cannot issue refunds, cancel orders, or change payment, tax, or domain settings.
- Before you connect any store to an AI app, check what the app can change, who approves risky changes, where each change is recorded, and how to disconnect it.
What MCP means for a store
An MCP server is a list of tools with a description of each one. An AI app connects to the server, reads that list, and calls a tool when the conversation needs it. “Find orders from this week” becomes a call to an order search tool. “Lower the price of the blue mug to $18” becomes a call to a product update tool.
Two details decide whether this is safe:
- Which tools the server offers. A server that has only read tools cannot change your store, however the AI app interprets your request.
- Whose permissions it uses. A good store server signs you in with your own account and lets the app do only what you are allowed to do.
The AI app’s own model chooses which tools to call. The server decides which tools exist and checks every call.
The Shopify MCP servers, side by side
| Server | Who it is for | What it can do | Reads your live store data? |
|---|---|---|---|
| Dev MCP server | Developers building Shopify apps and themes | Search Shopify’s developer docs and API schemas, and check GraphQL, Liquid, and extension code | No. It runs locally and needs no sign-in. |
| Storefront MCP servers (catalog, cart, checkout, ask, order, and customer accounts) | AI agents that shop on behalf of a buyer | Search products, build and update carts, start checkout, and answer policy questions | Shopper-facing data only |
| Shopify connector for Claude | Merchants who want to run a store from Claude | Add and edit products and collections, manage inventory, check orders and analytics, create percentage-off discount codes, and edit theme design | Yes, after you approve access in the Shopify admin |
The Dev MCP server installs in Claude Code with one command from Shopify’s docs:
claude mcp add --transport stdio shopify-dev-mcp -- npx -y @shopify/dev-mcp@latestThe storefront servers share one endpoint per shop, https://{shop}/api/ucp/mcp, and the Storefront MCP page lists tools such as search_catalog, get_product, create_cart, and ask_business. They are built for agentic shopping: the agent acts for a buyer, not for the merchant.
What the Shopify connector for Claude cannot do
According to Shopify’s help page, you install the connector from Claude, not from the Shopify App Store, and Shopify charges no extra fee for it. The same page lists what it cannot do:
- Edit, publish, or delete the live theme.
- Change settings such as the plan, payments, taxes, or domains.
- Issue refunds, cancel or capture orders, or mark orders as paid.
- Change items in large batches reliably. Shopify warns that a large batch can stop partway.
- Change customer records. It can only look them up.
Shopify also says the connector does not replace the Shopify admin. Plan to keep money work, such as refunds and payment settings, in the admin.
Several third-party apps in the Shopify App Store also offer MCP access to a store. They set their own permissions and pricing, so read each app’s listing before you install it.
A checklist before you connect any store to an AI app
These questions apply to Shopify, Runner AI, or any other platform. Ask them before you click Allow.
- Does it sign you in, or does it ask for a key? An OAuth sign-in ties the connection to your account. An API key pasted into a chat app is a long-lived secret held by another company.
- Can you choose read-only access? Start with read access. Add write access when you trust the app with a specific job.
- Can it do more than you can? The connection should never get more access than your own role in the store. Our role-based access control guide explains why that matters for teams.
- Are risky changes kept out, or confirmed first? Refunds, payouts, payment settings, and domain changes should either be unavailable to the app or wait for a person. Our human-in-the-loop guide covers where a person should approve.
- Is each change recorded? You should be able to see which member and which AI app made a change, and when.
- Can you disconnect it at once? Find the page where you remove the connection before you need it.
- What happens on a retry? AI apps retry calls that time out. A safe server does not apply the same change twice.
Test with one low-risk job first, such as “list products with fewer than five in stock”. Then check the result in the store’s own admin, not only in the chat.
How Runner AI handles MCP connections
Runner AI has its own MCP server for merchants, called the Merchant MCP. It turned on for every Runner merchant on November 12, 2026. It is a remote server at https://api.runnerai.com/mcp, so any MCP client that supports a remote server with an OAuth sign-in can connect to it. For example, in Claude Code:
claude mcp add --transport http runner https://api.runnerai.com/mcpHere is how it answers the checklist above:
- Sign-in. The AI app opens a Runner page titled Connect an AI app to Runner. You pick the workspace and the access: Read, which is always on, and Make changes, which lets the app change store data such as products, prices, and discounts.
- Your permissions, not more. One connection reaches every store in the workspace you chose. Each call is checked against your membership and your role in Runner, so the app can do only what you can do.
- Changes are recorded. Each change made through the connection adds an entry to the store’s Activity, naming the member and the AI app.
- Retries are safe. If the app sends the same change again within a few minutes, Runner returns the first result instead of applying the change twice.
- Disconnect at once. Workspace settings have a Connected apps section that lists each app, its access, and when it was last used. When you disconnect an app, its access stops at once.
- No Runner credits. The AI app’s own model does the thinking. Runner’s agent does not run behind these tools, so the calls do not use Runner credits.
If you prefer to work inside Runner, the same tools are available to Runner’s own agent in chat. Our AI agent tools guide explains how those tools are chosen and checked.
Related questions
What is Shopify MCP?
Shopify MCP is a group of Model Context Protocol servers from Shopify. The Dev MCP server helps developers with Shopify docs and code. The Storefront MCP servers let shopping agents search, build carts, and check out. The Shopify connector for Claude lets a merchant manage a store from Claude.
Is the Shopify Dev MCP server connected to my store?
No. Shopify’s docs say the Dev MCP server runs locally and needs no sign-in. It reads Shopify’s developer docs and API schemas, not your store’s live data.
Can the Shopify connector for Claude issue refunds?
No. Shopify’s help page says the connector cannot issue refunds, cancel or capture orders, or mark orders as paid. Do that work in the Shopify admin.
Is the Shopify connector for Claude free?
Shopify’s help page says there is no extra Shopify fee for the connector. Your normal Shopify plan applies, and any Claude subscription is paid to Anthropic.
Can I connect Claude Code or Cursor to a Runner AI store?
Yes. Add https://api.runnerai.com/mcp as a remote MCP server in the app, then sign in with your Runner account and choose the workspace and access. You can disconnect the app in workspace settings under Connected apps.
