This is a human-readable page. If you're an agent, fetch /vendor/shopify/AgentRouting.json or /vendor/shopify/AgentContext.json directly.

shopify.com

last checked 2026-06-30

Overview

Does shopify.com support MCP?

Yes. shopify.com has a confirmed MCP implementation. Developer tooling: surfaces Shopify developer documentation, Admin GraphQL API schemas, Shopify Functions reference, Liquid validation, and Polaris component docs to AI coding assistants; runs locally via npx, no auth required.

What agentic protocols does shopify.com support?

As of 2026-06-30, shopify.com has confirmed support for A2A, ACP, MCP, NLWeb, UCP, openai_apps_sdk, proprietary, and self_declared_discovery.

Is shopify.com's API publicly accessible or partner-gated?

Access varies by protocol: open, platform mediated, partner only.

Does shopify.com explicitly prohibit automated access?

Yes. shopify.com's terms of service explicitly prohibit automated or scraper access to the public website without prior written permission.

Is shopify.com agent-ready?

Yes. shopify.com has a confirmed, agent-callable interface that supports end-to-end workflow completion.

Protocols

A2A confirmed present

Transport option within Shopify's Universal Commerce Protocol (UCP): A2A is listed alongside MCP, REST, GraphQL, and JSON-RPC as one of the supported transport/envelope protocols through which external agents can execute end-to-end commerce flows (discovery, checkout, post-purchase) on Shopify merchants.

Shopify's official UCP page (shopify.com/ucp) explicitly lists A2A alongside MCP and REST as supported transports within the Universal Commerce Protocol, confirmed via Shopify's own 'AI commerce at scale' announcement (shopify.com/news/ai-commerce-at-scale). A2A is not Shopify's primary or standalone protocol — it is one of several interchange options within the UCP layer, with UCP providing the unified business logic above it.

ACP confirmed present

Merchant platform intermediary for ACP-powered ChatGPT Instant Checkout: Shopify abstracts ACP protocol handling entirely, exposing it to its merchants as a toggle in the Agentic Storefronts section of Shopify Admin. Merchants do not implement ACP directly; Shopify manages the protocol layer on their behalf. Scoped to product discovery and checkout completion for US-based Shopify merchants with Shopify Payments enabled.

Shopify is explicitly named in OpenAI and Stripe's ACP launch announcements as covering over one million merchants, with named brands including Glossier, SKIMS, Spanx, and Vuori. Shopify's own Help Center documents the ChatGPT agentic storefront at https://help.shopify.com/en/manual/online-sales-channels/agentic-storefronts/chatgpt, confirming merchants can manage ChatGPT access via the Agentic section of Shopify Admin. Shopify handles ACP protocol implementation as a platform, so individual merchant stores are platform_mediated rather than independently callable endpoints.

AP2 not found

No evidence found that Shopify has adopted or announced support for AP2 (Agent Payments Protocol / FIDO Alliance cryptographic payment mandates). Shopify's published agentic commerce work centers on UCP (Universal Commerce Protocol, co-developed with Google) rather than AP2. Named AP2 adopters referenced in search results include Mastercard and Stripe/OpenAI; Shopify is not listed among them.

MCP confirmed present

Developer tooling: surfaces Shopify developer documentation, Admin GraphQL API schemas, Shopify Functions reference, Liquid validation, and Polaris component docs to AI coding assistants; runs locally via npx, no auth required

Shopify's official Dev MCP server (@shopify/dev-mcp on npm) runs locally and requires no authentication. It is documented at https://shopify.dev/docs/apps/build/devmcp and provides tools for Shopify API schema introspection, code validation, and documentation lookup for use in AI coding assistants such as Claude Code and Cursor.

MCP confirmed present

Storefront commerce: exposes store catalog search, cart management, and policy inquiry tools to AI shopping agents; Shopify-hosted per-store remote endpoint, no auth required

Shopify's official Storefront MCP server is a remote, Shopify-hosted endpoint available on every store. It is documented at https://shopify.dev/docs/apps/build/storefront-mcp/servers/storefront and implements the UCP Catalog capability (search_catalog, lookup_catalog, get_product tools). No API key or account is required to connect.

MCP confirmed present

Authenticated customer account management: allows AI agents to access order history, initiate returns, and manage account preferences on behalf of a logged-in customer via OAuth 2.0 PKCE flow

Shopify's official Customer Accounts MCP server is documented at https://shopify.dev/docs/apps/build/storefront-mcp/servers/customer-account. It requires a custom domain (not *.myshopify.com), New Customer Accounts enabled on the store, and Level 2 protected customer data approval. As of mid-2026 it is described as in preview for select partners.

MPP not found

Original confirmed_present claim lacked any supporting detail (no role, no notes) and was discarded pending re-verification.

NLWeb confirmed present

Early launch partner; Shopify's participation centers on 'Agentic Storefronts' — enabling product discovery and commerce transactions via NLWeb's conversational /ask endpoint and /mcp endpoint, grounded in Schema.org product data from Shopify stores.

Shopify is named as an NLWeb launch partner by Microsoft, with 'Agentic Storefronts' as the framing (enabling AI-driven product conversations wherever agents operate). Shopify also maintains a dedicated Storefront MCP page at https://shopify.dev/docs/apps/build/storefront-mcp, confirming vendor-side investment in the MCP/NLWeb surface. Multiple independent sources (Microsoft Tech Community, Shelly Palmer, Salespeak) corroborate Shopify's named participation.

UCP confirmed present

Shopify acts as the merchant-side UCP business server, enabling AI agents to discover Shopify merchant product catalogs, build carts, convert to checkouts, and complete or cancel purchases via negotiated capability sessions; trust-tiered access gates direct checkout completion behind higher-trust agent profiles

Shopify co-developed UCP with Google and launched it at NRF on January 11, 2026. Merchants on Shopify participate automatically through Shopify's hosted UCP business server at https://{shop-domain}/api/ucp/mcp; agents register via a hosted profile and trust tiers control checkout completion access. Full agent developer documentation is at https://shopify.dev/docs/agents.

WebMCP not found

No evidence found of Shopify natively implementing the WebMCP browser-layer protocol (window.AICommands surface) on shopify.com. Shopify has published its own Storefront MCP and DevMCP offerings (standard Model Context Protocol, not WebMCP), and third-party services like webmcpworld.com offer WebMCP integration for Shopify stores, but neither constitutes a vendor-native WebMCP implementation. WebMCP itself was only in Chrome 146 Canary preview as of April 2026, and no WebMCP launch partner list naming Shopify was found.

x402 not found

Original confirmed_present claim lacked any supporting detail (no role, no notes) and was discarded pending re-verification.

openai_apps_sdk confirmed present

Enables product discovery and in-chat purchasing (Instant Checkout) for Shopify merchants within ChatGPT conversations, covering product catalog surfacing and transactional checkout without redirect; US-eligible merchants are enrolled automatically via Agentic Storefronts, managed from Shopify Admin

Shopify officially launched the ChatGPT integration (branded 'Agentic Storefronts') with OpenAI in September 2025, becoming active by default for eligible US merchants as of March 24, 2026. Access is open to eligible Shopify merchants with no manual opt-in required — the enrollment is automatic from Shopify Admin. This is a platform-specific integration with OpenAI's ChatGPT shopping surface, not a general-purpose SDK.

proprietary confirmed present

Admin API (GraphQL): full merchant store management — products, orders, customers, inventory, fulfillment, billing; the primary programmatic interface for Shopify app developers. Auth via OAuth 2.0 issuing an X-Shopify-Access-Token header. New public apps required to use GraphQL exclusively as of April 2025; REST Admin API now legacy.

Shopify's GraphQL Admin API is the definitive proprietary interface for merchant-side operations, versioned quarterly (e.g. 2026-04). The legacy REST Admin API (https://shopify.dev/docs/api/admin-rest) covers overlapping scope but is now deprecated for new public apps. Both require app installation and OAuth-issued credentials; access is gated behind Shopify partner enrollment.

proprietary confirmed present

Storefront API (GraphQL): buyer-facing catalog browsing, cart management, checkout initiation, and customer authentication for custom storefronts; read/write access scoped to public-facing commerce data only, not merchant admin data.

The Storefront API targets developers building headless or custom storefronts (web, mobile, gaming). It is distinct from the Admin API in both endpoint path and credential type. Authentication uses a per-store public access token rather than an OAuth-scoped private token.

proprietary confirmed present

Partner API (GraphQL): automation of Shopify Partners Dashboard operations — managing apps, payouts, organizations, and emitting usage/billing events; targets Shopify Partners (agencies, app developers), not merchants.

The Partner API is a separate proprietary surface from both the Admin and Storefront APIs, scoped to partner-org-level operations rather than individual merchant stores. Access requires an active Shopify Partners account. Versioned on the same quarterly cadence as other Shopify APIs.

self_declared_discovery confirmed present

Shopify auto-generates /llms.txt, /llms-full.txt, and /agents.md on every merchant storefront, providing AI-readable product catalogs, store policies, UCP/MCP endpoint locations, and agent interaction guidance; these files are served at the bare primary domain with no authentication required

Shopify ships /llms.txt, /llms-full.txt, and /agents.md by default to every store as of early May 2026, auto-generated from store configuration. Merchants can override via Liquid templates (agents.md.liquid, llms.txt.liquid) under Online Store > Themes > Edit code (documented at https://shopify.dev/docs/storefronts/themes/architecture/templates/agents-md-liquid). The agents.md file is the canonical agent-discovery document and includes UCP/MCP endpoint references, browsing URLs, and published policies.

Summary

Has agent interface: true

Integrate via Shopify's official agent-native surfaces: the Storefront MCP server (https://{store}.myshopify.com/api/mcp, no auth required) for product discovery and cart operations; the UCP business server (https://{shop-domain}/api/ucp/mcp, agent profile + API key required) for full end-to-end commerce flows including checkout; or the Admin GraphQL API (OAuth 2.0, partner enrollment required) for merchant-side management. For ChatGPT-surface access, use the ACP/OpenAI Agentic Storefronts path via Shopify Admin. Confirm MPP and x402 scope and auth requirements before routing production payment flows through those protocols.

AgentContext

Five discrepancy categories were checked for Shopify (shopify.com): pricing discrepancies, availability discrepancies, identity/merchant-of-record ambiguity, policy enforcement discrepancies, and undisclosed platform constraints. In all five categories, active searches were conducted and returned results, but none surfaced independently verified findings that would require agent escalation. Pricing and availability searches confirmed that any discrepancies at checkout originate from individual merchant configurations, not Shopify's platform itself. Identity searches confirmed Shopify openly discloses its non-MoR status in its own Terms of Service. Policy searches found that refund and cancellation exceptions are publicly documented in Shopify's help center rather than hidden. The undisclosed constraints search identified known platform limits (variant caps, Payments prohibitions, checkout.liquid deprecation) that are all disclosed in Shopify's own documentation. No regulatory actions, enforcement settlements, or corroborated complaint patterns were identified across any category that would generate a specific handoff trigger for an AI agent completing a transaction on this platform.