Is io.github.den-indance/shopify-mcp-pro safe to use?

io.github.den-indance/shopify-mcp-pro has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.den-indance/shopify-mcp-pro?

io.github.den-indance/shopify-mcp-pro can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.den-indance/shopify-mcp-pro?

io.github.den-indance/shopify-mcp-pro is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.den-indance/shopify-mcp-pro actively maintained?

io.github.den-indance/shopify-mcp-pro is actively maintained — last commit was 8 days ago. It has 1 GitHub stars.

io.github.den-indance/shopify-mcp-pro

Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.

1 0 tools GitHub

No known CVEs

No license

Actively maintained

Last commit 8d ago

Works with most clients

Transport: stdio

0 tools

Grade F

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-den-indance-shopify-mcp-pro": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-den-indance-shopify-mcp-pro)](https://mcppedia.org/s/io-github-den-indance-shopify-mcp-pro)

Read me

What io.github.den-indance/shopify-mcp-pro does

Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

34/100across 5 weighted dimensions

How we score →

0255075100

−66

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.den-indance/shopify-mcp-pro safe to use?: io.github.den-indance/shopify-mcp-pro has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.den-indance/shopify-mcp-pro?: io.github.den-indance/shopify-mcp-pro can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.den-indance/shopify-mcp-pro?: io.github.den-indance/shopify-mcp-pro is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.den-indance/shopify-mcp-pro actively maintained?: io.github.den-indance/shopify-mcp-pro is actively maintained — last commit was 8 days ago. It has 1 GitHub stars.

Similar servers

Others in ecommerce

View all →

Cob Shopify Mcp90

Production-grade MCP server and CLI tool for Shopify Admin GraphQL API — 49+ tools, YAML-extensible, dual auth, dual transport, Docker-ready

11 6

Commerce Mcp89

A command line tool for setting up commercetools MCP server

2 12

io.github.sailorpepe/undesirables-mcp-server89

35+ AI tools for TCG card grading, Monte Carlo pricing, 370K+ product search. BYOK.

Mcp Reference Server88

This is the reference implementation for the mcp server

32 12

MCP Security Weekly

Get CVE alerts and security updates for io.github.den-indance/shopify-mcp-pro and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-den-indance-shopify-mcp-pro": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-den-indance-shopify-mcp-pro)](https://mcppedia.org/s/io-github-den-indance-shopify-mcp-pro)

Read me

What io.github.den-indance/shopify-mcp-pro does

Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

Shopify MCP Pro

The working Shopify MCP server. Connect Claude to your Shopify store — products, orders, customers, inventory, analytics and more.

Most Shopify MCP packages have broken analytics (stubs that return wrong data), use deprecated API fields that crash at runtime, and require a static token that expires silently. This one doesn't.

Built by Denis Maleev.

Why this one

What's fixed	Detail
Analytics tools were stubs	`getSalesReport`, `getConversionReport`, `getTrafficReport` now powered by ShopifyQL — real data
Auth that actually works	Uses Client ID + Secret from Shopify Dev Dashboard, tokens refresh automatically — no silent expiry
Deprecated API fields	`getInventoryLevels`, `listAbandonedCheckouts` updated to Shopify 2026-04 field schema
Runtime crashes	`getShippingZones` no longer crashes on stores with no delivery profiles
New: `runShopifyQL`	Run any ShopifyQL query directly — same data as Admin → Analytics
Shopify Admin API	`2026-04` (current GA) + `@shopify/shopify-api` v13

Quick Start

npx @den.dance/shopify-mcp-pro

Setup

1. Create a Custom App in Shopify

Go to your Shopify Admin → Settings → Apps and sales channels
Click Develop apps (enable custom app development if prompted)
Click Create an app, give it a name (e.g. "Claude MCP")
Go to Configure Admin API scopes and select scopes you need (see list below)
Click Install app
Go to API credentials tab — you'll see Client ID and Client secret

Note: Shopify no longer shows a static access token by default. This server uses OAuth with Client ID + Secret.

2. Configure Claude Desktop

Edit your Claude Desktop config file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
Linux: ~/.config/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "shopify": {
      "command": "npx",
      "args": ["@den.dance/shopify-mcp-pro"],
      "env": {
        "SHOPIFY_STORE_DOMAIN": "your-store.myshopify.com",
        "SHOPIFY_CLIENT_ID": "your-client-id",
        "SHOPIFY_CLIENT_SECRET": "your-client-secret",
        "SHOPIFY_API_VERSION": "2026-04",
        "SHOPIFY_LOG_LEVEL": "WARNING"
      }
    }
  }
}

Restart Claude Desktop after saving.

Configure Claude Code

claude mcp add shopify -e SHOPIFY_STORE_DOMAIN=your-store.myshopify.com \
  -e SHOPIFY_CLIENT_ID=your-client-id \
  -e SHOPIFY_CLIENT_SECRET=your-client-secret \
  -- npx @den.dance/shopify-mcp-pro

Environment Variables

Variable	Required	Description
`SHOPIFY_STORE_DOMAIN`	Yes	e.g. `my-store.myshopify.com`
`SHOPIFY_CLIENT_ID`	Yes	From Shopify Dev Dashboard
`SHOPIFY_CLIENT_SECRET`	Yes	From Shopify Dev Dashboard
`SHOPIFY_API_VERSION`	No	Defaults to `2026-04`
`SHOPIFY_LOG_LEVEL`	No	`error`, `warning`, `info`, `debug` (default: `warning`)
`TRANSPORT_MODE`	No	`stdio` (default) or `sse`
`PORT`	No	HTTP port for SSE mode (default: `3000`)

API Scopes

Minimum recommended

read_products, write_products
read_orders
read_customers
read_inventory, write_inventory

For analytics

read_analytics
read_reports

Full feature set

read_draft_orders, write_draft_orders
read_fulfillments, write_fulfillments
read_shipping
read_marketing_events, write_marketing_events
read_discounts, write_discounts
read_price_rules, write_price_rules
read_themes
read_content, write_content
read_metaobjects, `write_me

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

34/100across 5 weighted dimensions

How we score →

0255075100

−66

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.den-indance/shopify-mcp-pro safe to use?: io.github.den-indance/shopify-mcp-pro has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.den-indance/shopify-mcp-pro?: io.github.den-indance/shopify-mcp-pro can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.den-indance/shopify-mcp-pro?: io.github.den-indance/shopify-mcp-pro is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.den-indance/shopify-mcp-pro actively maintained?: io.github.den-indance/shopify-mcp-pro is actively maintained — last commit was 8 days ago. It has 1 GitHub stars.