
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@ajackus/shopify-mcp-server
Advanced tools
Complete Model Context Protocol server for Shopify Admin API - 70+ tools for store management, analytics, and automation
A Model Context Protocol (MCP) server that enables Claude Desktop to interact with Shopify stores. Access products, orders, customers, inventory, and more through a secure API connection.
You can run this server directly using npx:
npx @ajackus/shopify-mcp-server
Or install globally:
npm install -g @ajackus/shopify-mcp-server
Access App Development:
Create the App:
Configure API Scopes:
Install the App:
Get Your Access Token:
Edit your Claude Desktop config file:
~/Library/Application Support/Claude/claude_desktop_config.json
%APPDATA%\Claude\claude_desktop_config.json
~/.config/Claude/claude_desktop_config.json
Add the Shopify server configuration:
{
"mcpServers": {
"shopify": {
"command": "npx",
"args": ["@ajackus/shopify-mcp-server"],
"env": {
"SHOPIFY_STORE_DOMAIN": "your-store.myshopify.com",
"SHOPIFY_ACCESS_TOKEN": "shpat_your_access_token_here",
"SHOPIFY_LOG_LEVEL": "warning"
}
}
}
}
This MCP server provides comprehensive access to the Shopify Admin API with 70+ tools covering all major store operations.
Ask Claude to:
For full functionality, configure your Shopify app with these scopes:
read_products
, write_products
- Product managementread_orders
- Order viewingread_customers
- Customer data accessread_inventory
, write_inventory
- Inventory managementread_draft_orders
, write_draft_orders
- Draft order managementread_fulfillments
, write_fulfillments
- Fulfillment processingread_shipping
- Shipping configurationread_analytics
- Analytics and reportingread_marketing_events
, write_marketing_events
- Marketing toolsread_discounts
, write_discounts
- Discount managementread_price_rules
, write_price_rules
- Pricing strategiesread_reports
- Advanced reportingread_themes
- Theme managementread_content
, write_content
- Pages and blog managementread_metaobjects
, write_metaobjects
- Custom data structuresread_gift_cards
, write_gift_cards
- Gift card managementImportant: You don't need to grant all scopes! The MCP server adapts to available permissions:
Example scenarios:
The server will work with whatever scopes you provide - tools requiring missing scopes will simply return authorization errors without affecting other functionality.
SHOPIFY_STORE_DOMAIN
(required) - Your Shopify store domainSHOPIFY_ACCESS_TOKEN
(required) - Your Admin API access tokenSHOPIFY_API_VERSION
(optional) - API version (defaults to latest)SHOPIFY_LOG_LEVEL
(optional) - Logging level: error
, warning
, info
, debug
(defaults to warning
)TRANSPORT_MODE
(optional) - Transport mode: stdio
(default) or sse
PORT
(optional) - HTTP port for SSE mode (defaults to 3000)The server uses proper logging to stderr to avoid interfering with the MCP protocol:
Set SHOPIFY_LOG_LEVEL=debug
to see all API requests and responses.
If you want to run from source:
git clone https://github.com/ajackus/shopify-mcp-server.git
cd shopify-mcp-server
npm install
npm run build
Then update your Claude config to use the local build:
{
"mcpServers": {
"shopify": {
"command": "node",
"args": ["/path/to/shopify-mcp-server/build/index.js"],
"env": {
"SHOPIFY_STORE_DOMAIN": "your-store.myshopify.com",
"SHOPIFY_ACCESS_TOKEN": "shpat_your_access_token_here"
}
}
}
}
If the server doesn't appear in Claude:
SHOPIFY_STORE_DOMAIN=your-store.myshopify.com \
SHOPIFY_ACCESS_TOKEN=shpat_your_token \
npx @ajackus/shopify-mcp-server
The server supports SSE (Server-Sent Events) transport for HTTP-based access, enabling deployment to cloud platforms.
# Install dependencies
npm install
# Build the project
npm run build
# Run in SSE mode
TRANSPORT_MODE=sse \
SHOPIFY_STORE_DOMAIN=your-store.myshopify.com \
SHOPIFY_ACCESS_TOKEN=shpat_your_token \
SHOPIFY_LOG_LEVEL=warning \
PORT=3000 \
node build/index.js
The server will start on http://localhost:3000
with:
GET /sse
POST /messages?sessionId={id}
GET /health
Fork or push this repository to GitHub
Connect to Render:
render.yaml
configurationSet Environment Variables:
SHOPIFY_STORE_DOMAIN
: Your store domainSHOPIFY_ACCESS_TOKEN
: Your API access tokenrender.yaml
Deploy:
https://your-app.onrender.com
Configure Claude Desktop for SSE:
{
"mcpServers": {
"shopify-remote": {
"transport": {
"type": "sse",
"url": "https://your-app.onrender.com/sse"
}
}
}
}
Build and run with Docker:
# Build image
docker build -t shopify-mcp-server .
# Run container
docker run -p 3000:3000 \
-e SHOPIFY_STORE_DOMAIN=your-store.myshopify.com \
-e SHOPIFY_ACCESS_TOKEN=shpat_your_token \
-e SHOPIFY_LOG_LEVEL=warning \
shopify-mcp-server
MIT
Issues and pull requests are welcome at: https://github.com/ajackus/shopify-mcp-server
FAQs
Complete Model Context Protocol server for Shopify Admin API - 70+ tools for store management, analytics, and automation
We found that @ajackus/shopify-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.