
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@codespar/mcp-shopify
Advanced tools
MCP server for Shopify — global ecommerce platform Admin REST API (orders, products, customers, inventory, fulfillments, webhooks)
MCP server for Shopify — global ecommerce platform Admin REST API.
Shopify is the global DTC standard and dominant across LatAm for brands operating internationally (complementary to Nuvemshop/Tiendanube for regional-only merchants, also in this catalog). Agents building merchant tools — restocking, refund automation, marketing campaigns, fulfillment orchestration — integrate directly with the Admin API rather than through a reseller.
| Tool | Purpose |
|---|---|
list_orders | List orders with status, financial, fulfillment, and date filters |
get_order | Retrieve a single order by ID |
create_order | Create an order (draft, phone, marketplace ingestion) |
update_order | Update tags, note, shipping_address, metafields |
cancel_order | Cancel with reason, optional email/restock/refund |
list_products | List products with status, vendor, collection filters |
get_product | Retrieve a product with variants and images |
create_product | Create product with variants, options, images |
update_product | Update product fields, variants, images |
list_customers | List customers with full-text query |
create_customer | Create a customer record |
adjust_inventory | Adjust available inventory by delta at a location |
create_fulfillment | Mark line items shipped, attach tracking |
register_webhook | Subscribe to event topics (orders/create, products/update, etc) |
npm install @codespar/mcp-shopify
SHOPIFY_SHOP="acme" # subdomain (acme.myshopify.com)
SHOPIFY_ACCESS_TOKEN="shpat_..." # Admin API access token (secret)
SHOPIFY_API_VERSION="2024-01" # Optional. Defaults to 2024-01.
Private/custom app access token sent as header on every request:
X-Shopify-Access-Token: <SHOPIFY_ACCESS_TOKEN>
Create a custom app in Shopify admin → Settings → Apps and sales channels → Develop apps, grant the Admin API scopes you need (read/write orders, products, customers, inventory, fulfillments), and install to generate the token.
# stdio (default — for Claude Desktop, Cursor, etc)
npx @codespar/mcp-shopify
# HTTP (for server-to-server testing)
MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-shopify
Uses the Shopify Admin REST API at https://{shop}.myshopify.com/admin/api/{version}. Default version is 2024-01 (stable). Override with SHOPIFY_API_VERSION when newer stable versions ship.
MIT
FAQs
MCP server for Shopify — global ecommerce platform Admin REST API (orders, products, customers, inventory, fulfillments, webhooks)
The npm package @codespar/mcp-shopify receives a total of 41 weekly downloads. As such, @codespar/mcp-shopify popularity was classified as not popular.
We found that @codespar/mcp-shopify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.