Connect Shopify to Claude

Shopify’s own MCP servers help with building (Dev MCP) and with shopping in a store (Storefront MCP) – not with running the shop. XenMCP connects Claude or ChatGPT to your shop’s Admin API through your own app from the Shopify Dev Dashboard. Everyone on the team signs in as themselves, and access can be revoked at any time.

Read-only by default: products, stock per location, collections, orders, sales from Shopify Analytics, pages and the blog. With read-only off the AI client writes product and article drafts and internal order notes. Publishing, changing active products, prices or stock, and deleting are not possible.

What you can ask Claude

• What were our sales in October, per week, and which ten products sold best?
• Which active products have fewer than 5 in stock?
• Which paid orders have not shipped for more than three days?
• Add a product draft “Winter beanie” for €24.90, with a description and an SEO title.

Typical tools

shop_info

Shop, domains, currency, time zone and the app’s access scopes

list_products / get_product / get_inventory / list_collections

Products with variants, prices, SEO and stock per location; collections

list_orders / get_order

Orders with items, payment, shipping, refunds and tracking

sales_report / shopifyql_query

Sales per day, week or month and any ShopifyQL analysis

list_pages / list_articles / get_article

Online store pages and blog articles

create_product_draft / update_product_draft

Add and change product drafts (with read-only off)

create_article_draft / update_article_draft / add_order_note

Blog drafts, internal order notes (with read-only off)

Publish, change active products, prices or stock, delete

Not there

What you need to connect

• Your own app in the Shopify Dev Dashboard, in your shop’s organization, with the access scopes it needs and installed on the shop
• The app’s client ID and client secret (an old shpat_ token from an earlier custom app works too)

Security

• Read-only by default; even with read-only off only drafts and internal notes are written. XenMCP never changes what is live in the shop.
• The app is yours: you choose its access scopes and can uninstall it at any time. The secret is stored encrypted (AES-256-GCM); the server uses it to fetch a token that lives 24 hours.
• Buyers’ email, phone and street appear in no answer – only name, city and country.
• The sandbox reaches only your shop at myshopify.com. XenMCP’s call log keeps only tool, status and duration.

Built on

There is no open server for this system yet that meets our criteria. We are building one on the official API.

Frequently asked questions