Shopify MCP server: which one, URL and tools

01Which Shopify MCP server should I use?

02What is the Shopify MCP server URL?

There isn't one. It depends on the server:

• One store's catalog, cart and checkout: https://{store}/api/ucp/mcp.
• All stores' catalog: https://catalog.shopify.com/api/ucp/mcp.
• A store's customer accounts: read mcp_api from https://{store}/.well-known/customer-account-api. On the store checked, it was https://account.{domain}/customer/api/mcp.
• Shop connector: https://mcp.shop.com/.
• A store's discovery file: https://{store}/.well-known/ucp.

The owner plugin and connector install from ChatGPT and Claude, so you don't need a URL.

03What happened to Shopify Storefront MCP?

Shopify removed the catalog and cart tools from https://{shop}/api/mcp and moved them to /api/ucp/mcp.

Three things change in your code: include an agent profile in every /api/ucp/mcp request, create carts with create_cart, and authenticate or sign every Checkout MCP request. Each update_cart replaces the whole cart, so send every line.

On the live store checked, /api/mcp still answered, with only search_shop_policies_and_faqs. Customer Accounts MCP is unchanged.

04Does Shopify's UCP MCP need an API key?

Not for catalog, cart or most checkout tools. Shopify's tiers:

Neither Signed nor Anonymous can call complete_checkout or order tools.

Token-tier calls to a store's endpoint also send a Shopify-Buyer-IP header.

A profile is a URL pointing to your agent's UCP profile, sent as meta.ucp-agent.profile. On the live store checked, tools/list worked without one, and search_catalog failed with invalid_profile_url.

05What does Customer Accounts MCP need?

On a live store on 5 November 2026, its tools/list returned get_most_recent_order_status, get_order_status, get_store_credit_balances and request_return. Shopify says to discover tools at runtime, so yours may differ.

• A custom domain on the store, according to Shopify's docs. The tools worked without one on a development store tested on 5 November 2026.
• An app in Shopify's Dev Dashboard that meets the protected customer data requirements. You request access to name, email, phone and address, giving a reason for each.
• The scope customer-account-mcp-api:full and your redirect URIs under [customer_authentication]. In that test, Shopify rejected openid or email requested alongside it, and refused localhost redirect URIs.
• The authorization code flow with PKCE, using your app ID as the client ID.

Find the endpoints at /.well-known/openid-configuration and /.well-known/customer-account-api on the store's domain. A tool call with no token returns 401. In that test the access token lasted an hour, with no refresh token, using PKCE and no client secret.

06Can I use Shopify MCP with ChatGPT or Claude?

To manage your store, yes: install the official plugin or connector. Shopify says to use those, not to create an API token or build your own integration for that job.

To shop across stores in Claude, add the Shop connector.

To offer your own store in their directories, you can't list Shopify's endpoints as they are. On the store checked, calls needed the agent profile that ChatGPT and Claude don't send, tools had no annotations, customer tools were on a separate host, and the sign-in metadata offered no self-registration. Put one server of your own in front.

07Shopify MCP or Shopify's GraphQL API?

Use MCP where a tool exists: Shopify maintains it, and the tools map to what customers ask. Use the GraphQL Storefront API for what the catalog tools don't return, such as metafields with a token, and the Customer Account API for account data beyond the four customer tools. Skip the Ajax API, which is only for themes hosted by Shopify.

09Common questions