Is io.github.A1-x-Tech/mcp-shopify-admin safe to use?

io.github.A1-x-Tech/mcp-shopify-admin has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install io.github.A1-x-Tech/mcp-shopify-admin?

io.github.A1-x-Tech/mcp-shopify-admin supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.A1-x-Tech/mcp-shopify-admin do?

io.github.A1-x-Tech/mcp-shopify-admin provides 3 tools: Contents, Configuration, Support. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.A1-x-Tech/mcp-shopify-admin?

io.github.A1-x-Tech/mcp-shopify-admin is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.A1-x-Tech/mcp-shopify-admin actively maintained?

io.github.A1-x-Tech/mcp-shopify-admin is actively maintained — last commit was 2 days ago.

io.github.A1-x-Tech/mcp-shopify-admin

mcp-shopify-admin

MCP server for the Shopify Admin API: products, orders, customers, inventory, discounts.

503/wk 3 tools GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 2d ago

Works with most clients

Transport: stdio, sse, http

3 tools · ~112 tok

Grade A · 0.1% of 200K ctx

MCPpedia last refreshed this data 8h ago

Edit this pageView history

io.github.A1-x-Tech/mcp-shopify-admin is an MCP server that MCP server for the Shopify Admin API: products, orders, customers, inventory, discounts. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 89/100 on MCPpedia's security, maintenance and efficiency rubric.

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "shopify-admin": {
      "env": {
        "SHOPIFY_CLIENT_ID": "your_client_id",
        "SHOPIFY_STORE_DOMAIN": "my-store.myshopify.com",
        "SHOPIFY_CLIENT_SECRET": "your_client_secret"
      },
      "args": [
        "-y",
        "mcp-shopify-admin@latest"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-a1-x-tech-mcp-shopify-admin)](https://mcppedia.org/s/io-github-a1-x-tech-mcp-shopify-admin)

Read me

What io.github.A1-x-Tech/mcp-shopify-admin does

A1 Shopify Admin MCP connects AI applications to one Shopify store through the Admin GraphQL API. Ask in plain language about products, orders, customers, inventory, discounts, and shop data; the assistant uses the server's ready-made tools and shows the result.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'mcp-shopify-admin' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

89/100across 5 weighted dimensions

How we score →

0255075100

−11

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked mcp-shopify-admin against OSV.dev.

Inventory

Tools (3)

Click any tool to inspect its schema.

~112 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.A1-x-Tech/mcp-shopify-admin safe to use?: io.github.A1-x-Tech/mcp-shopify-admin has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install io.github.A1-x-Tech/mcp-shopify-admin?: io.github.A1-x-Tech/mcp-shopify-admin supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.A1-x-Tech/mcp-shopify-admin do?: io.github.A1-x-Tech/mcp-shopify-admin provides 3 tools: Contents, Configuration, Support. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.A1-x-Tech/mcp-shopify-admin?: io.github.A1-x-Tech/mcp-shopify-admin is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.A1-x-Tech/mcp-shopify-admin actively maintained?: io.github.A1-x-Tech/mcp-shopify-admin is actively maintained — last commit was 2 days ago.

Similar servers

Others in ecommerce

View all →

Ru Marketplace Mcp93

Девять российских маркетплейсов и китайский Taobao как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, Мегамаркет, Lamoda, DNS, Ситилинк. Плюс сравнение цен по всем сразу. Только чтение, ключи не нужны.

72 8

io.github.geoacpfilho/paygate-monetize-monetization-x40290

Monetize any MCP server: x402 paywall, pay-per-call billing in USDC on Base, agent marketplace.

Commerce Mcp89

A command line tool for setting up commercetools MCP server

4 12

Sfcc Dev MCP Server88

MCP server for Salesforce B2C Commerce Cloud development assistance

27 9

MCP Security Weekly

Get CVE alerts and security updates for io.github.A1-x-Tech/mcp-shopify-admin and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "shopify-admin": {
      "env": {
        "SHOPIFY_CLIENT_ID": "your_client_id",
        "SHOPIFY_STORE_DOMAIN": "my-store.myshopify.com",
        "SHOPIFY_CLIENT_SECRET": "your_client_secret"
      },
      "args": [
        "-y",
        "mcp-shopify-admin@latest"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-a1-x-tech-mcp-shopify-admin)](https://mcppedia.org/s/io-github-a1-x-tech-mcp-shopify-admin)

Read me

What io.github.A1-x-Tech/mcp-shopify-admin does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'mcp-shopify-admin' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Shopify Admin MCP

English | Русский

A1 Shopify Admin MCP connects AI applications to one Shopify store through the Admin GraphQL API. Ask in plain language about products, orders, customers, inventory, discounts, and shop data; the assistant uses the server's ready-made tools and shows the result.

One store per server. The store domain and credentials come from configuration; tools cannot switch to another store.
Tokens stay fresh. Give the server the client ID and secret of a Shopify Dev Dashboard app and it mints the Admin API token itself, keeps it in memory only, and re-mints it before the 24-hour expiry. A ready-made token from an older custom app still works too.
16 focused tools. Read shop data, products, orders, customers, locations, inventory, and discounts, plus create or update the supported records.
GraphQL failures are surfaced. Shopify can return HTTP 200 for a failed mutation, so the server checks userErrors and rejects empty or malformed GraphQL responses.
Cost-aware responses. Every result includes the GraphQL cost bucket: the cost of the request and the points currently available for the next calls.
Risk is visible. Reads are read-only; product, price, inventory, and discount writes are explicit; order cancellation and arbitrary GraphQL are marked destructive.

Start with a read-only request:

Show the latest orders and the products that currently have inventory.

Connect the server · Explore use cases · Open technical documentation

See it work in a minute

You: Show the latest orders and the products that currently have inventory.

Assistant: Shows recent orders with their statuses and totals, then products with prices and inventory. Nothing changes.

You: Prepare a 20% discount code called SUMMER for two weeks.

Assistant: Shows the proposed code, percentage, dates, and limits, then asks for confirmation before creating it.

You: Confirm.

Quick start
What you can ask it to do
What can change in Shopify
Getting access
Configuration
Data, limits, and background work
Technical documentation
Support

Quick start

You need Node.js 20+, a store domain such as my-store.myshopify.com, and Admin API credentials. The recommended set is the client ID and secret of a Shopify Dev Dashboard app: the server exchanges them for an access token itself and keeps that token fresh, which matters because the token Shopify issues for this grant expires after 24 hours. The app and the store must belong to the same Shopify organization.

Get access and prepare the app's client ID and client secret.
Add the MCP server to your AI application.
Send the safe request from the opening section.

The server runs locally over stdio through npx. Browser-only ChatGPT and Claude web sessions cannot start a local stdio process directly.

Every snippet below uses that pair. If your store still holds a ready-made token from an admin-created custom app, replace SHOPIFY_CLIENT_ID and SHOPIFY_CLIENT_SECRET with a single

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

89/100across 5 weighted dimensions

How we score →

0255075100

−11

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked mcp-shopify-admin against OSV.dev.

Inventory

Tools (3)

Click any tool to inspect its schema.

~112 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.A1-x-Tech/mcp-shopify-admin safe to use?: io.github.A1-x-Tech/mcp-shopify-admin has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install io.github.A1-x-Tech/mcp-shopify-admin?: io.github.A1-x-Tech/mcp-shopify-admin supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.A1-x-Tech/mcp-shopify-admin do?: io.github.A1-x-Tech/mcp-shopify-admin provides 3 tools: Contents, Configuration, Support. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.A1-x-Tech/mcp-shopify-admin?: io.github.A1-x-Tech/mcp-shopify-admin is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.A1-x-Tech/mcp-shopify-admin actively maintained?: io.github.A1-x-Tech/mcp-shopify-admin is actively maintained — last commit was 2 days ago.