Skip to main content
Watch: I Built an AI App Without Leaving Databricks

Commerce - official Shopify server

Shopify UCP MCP server

Per-store remote MCP endpoint that implements the Universal Commerce Protocol, letting agents search a merchant's catalog, build carts, create and complete checkouts, and fetch order state. Served at https://{shop-domain}/api/ucp/mcp on each Shopify store. It is served from your own instance at https://{shop-domain}/api/ucp/mcp; the notes below cover how it authenticates.

Last verified 13 tools4 sources

Install

Shopify publishes no copyable client config for this server. Point your MCP client at https://{shop-domain}/api/ucp/mcp. Setup steps are in the vendor's docs.

Tools

search_catalog
Search products in a merchant's storefront catalog.
lookup_catalog
Look up products or variants by identifier.
get_product
Get full product details with variant selection.
create_cart
Create a cart with line items, localization and buyer context.
get_cart
Retrieve a cart.
update_cart
Replace the full cart contents (send every line item and field to keep).
cancel_cart
Cancel a cart.
create_checkout
Create a checkout session, optionally converting a cart via cart_id.
get_checkout
Retrieve a checkout session and its status.
update_checkout
Update a checkout session.
complete_checkout
Complete a purchase (Token-tier trusted agents only; requires an idempotency key).
cancel_checkout
Cancel a checkout session (requires an idempotency key).
get_order
Fetch fresh order state on demand (Token tier only).

As documented on October 17, 2026. A running server reports its current list through tools/list.

Notes and caveats

  • Every request must include meta.ucp-agent.profile pointing to the agent's UCP profile; returned tools depend on negotiated capabilities.
  • Three access tiers: Token (JWT Bearer from Dev Dashboard client credentials, highest limits, requires a Shopify-Buyer-IP header on tools/call), Signed (RFC 9421 HTTP Message Signatures, no complete_checkout or order tools), and Anonymous (catalog, cart and checkout build/edit at lowest limits).
  • Checkout MCP requires authentication or a signed request and is rate-limited more strictly than Cart MCP.
  • Replaces the removed Storefront MCP catalog and cart tools at https://{shop}/api/mcp; search_shop_policies_and_faqs remains on /api/mcp.
  • Shopify documents no MCP client config snippets; it points agents to the @shopify/ucp-cli CLI and the AI Toolkit ucp skill instead.
  • Transport not named explicitly in docs (JSON-RPC 2.0 over POST).
  • Universal Cart API is a separate early-access waitlist.

FAQ

What does the Shopify UCP MCP server do?

Per-store remote MCP endpoint that implements the Universal Commerce Protocol, letting agents search a merchant's catalog, build carts, create and complete checkouts, and fetch order state. Served at https://{shop-domain}/api/ucp/mcp on each Shopify store. The vendor documents 13 tools, including search_catalog, lookup_catalog, get_product and create_cart.

How do I install the Shopify UCP MCP server?

Shopify publishes no copyable client config. Point your MCP client at https://{shop-domain}/api/ucp/mcp. Setup steps are at https://shopify.dev/docs/agents.

Does the Shopify UCP MCP server need authentication?

It uses a scheme other than OAuth or an API key, such as the session of the app or instance it runs in; the notes on this page describe it. Transport: Streamable HTTP. Status: GA, last checked October 17, 2026.

Sources

Last verified against 4 Shopify pages, then re-checked independently.

Newsletter

New MCP servers, the week they ship

One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.