# Shopify MCP Server & Agent Skill

> Source: https://ibl.ai/developer/connectors/shopify

Connector · E-commerce platform

Last updated: October 20, 2026

**ibl.ai publishes a free Shopify agent skill: a SKILL.md that teaches an AI agent to read and write Shopify data and expose it as an MCP tool. Download it, connect your own Shopify credentials, and run the agent on ibl.ai Agentic OS, where you own all the code and the data.**

Hosted e-commerce platform. Each Shopify store holds products and variants, inventory by location, orders, refunds, fulfillments, customers, discounts and collections.

## What is the Shopify API, and what can an agent read from it?

GraphQL endpoint for store administration: queries for products, orders, customers and inventory, and mutations such as productCreate, inventorySetQuantities and refundCreate. Versioned by quarter (e.g. 2026-10).

- API: Shopify GraphQL Admin API (GraphQL)
- Access: Public, self-serve
- Base URL: https://{store_name}.myshopify.com/admin/api/{api_version}/graphql.json
- Authentication: OAuth 2.0 authorization code; OAuth 2.0 token exchange (embedded apps); OAuth 2.0 client credentials (developer's own stores)

Developers create an app (Shopify CLI or Dev Dashboard) and install it on a store. Admin-created custom apps with pre-generated tokens are a legacy method that is no longer available for new apps.

Each request sends the X-Shopify-Access-Token header. Tokens are scoped (read_products, write_orders, write_inventory and so on); a write scope also grants read. Offline tokens persist across sessions; online tokens last a staff session.

### What can an agent read from Shopify?

- **Orders** — orders query with filters and cursor pagination (first/after, up to 250 per page); needs read_orders.
- **Products and variants** — products query: titles, variants, prices, media and status.
- **Inventory levels** — Inventory items and quantities per location.
- **Customers** — customers query: contact details, order history and marketing consent fields.

### What can an agent write to Shopify?

- **Create product** — productCreate mutation (write_products) creates a product with options and an initial variant.
- **Set inventory quantities** — inventorySetQuantities mutation (write_inventory) sets absolute quantities with compare-and-set; needs an idempotency key from 2026-04.
- **Refund an order** — refundCreate mutation returns money to the customer for line items or shipping; needs an idempotency key from 2026-04. Confirm with the user first.

Limits: Calculated query cost in points per app and store: restores 100 points/second on Standard, 200 on Advanced, 1,000 on Plus, 2,000 on Shopify for enterprise. A single query may not exceed 1,000 points. Versions ship quarterly; each is supported 12+ months.

Holds consumer personal data (names, addresses, order history) and marketing consent status. Card numbers stay in Shopify's checkout and do not pass through the Admin API; refunds move real money.

## How do I connect Shopify to an AI agent over MCP?

Shopify publishes an official MCP server: [Shopify Dev MCP and Storefront MCP](https://shopify.dev/docs/apps/build/devmcp).

Dev MCP (@shopify/dev-mcp) runs locally with no auth and searches docs and API schemas only. Storefront MCP lets shopping agents search a store's catalog and manage carts. Neither reads Admin data.

You can register that server on ibl.ai as it is, or use the SKILL.md below when you want the agent to call the Shopify GraphQL Admin API directly.

On ibl.ai an MCP connection is three records, and a working integration always needs all three:

1. **Register the server** — `POST …/mcp-servers/` with its URL, a transport (`sse`, `websocket` or `streamable_http`) and an `auth_type` of `none`, `token` or `oauth2`.
2. **Create a connection** that holds the credential, scoped to the whole organization (`platform`), to a single agent, or to each user (`user`).
3. **Enable it on the agent** — `mcp-tool` in `tool_slugs` and the server id in `mcp_servers`. Both lists are replaced, not merged, so read the settings first.

Shopify supports per-user OAuth, so the server can use `auth_type=oauth2` with `auth_scope=user`: each person connects their own Shopify account in the chat the first time the agent needs it.

The field reference is in [MCP server connections](https://ibl.ai/developer/platform/mcp/mcp-connections), and the [/iblai-api-agent-mcp](https://ibl.ai/developer/skills/iblai-api-agent-mcp) skill runs all three steps from a coding agent.

## What does the Shopify agent skill do?

The Shopify skill is one SKILL.md file named `iblai-connect-shopify`. It gives an agent the auth conventions, what to read, which writes need a person's confirmation, the ibl.ai MCP wiring, example prompts and guardrails.

[Download the Shopify SKILL.md](https://ibl.ai/developer/connectors/shopify/SKILL.md)

Save it as `.claude/skills/iblai-connect-shopify/SKILL.md`, or in your agent's skills folder. The ibl.ai platform skills it calls come from one install:

```
npx skills add iblai/vibe --all
```

This connector skill is a starting point maintained on ibl.ai, not part of the iblai/vibe repository.

It was checked against Shopify's documentation on October 20, 2026. Test it against your own Shopify setup before you rely on it.

### What can I ask a Shopify agent to do?

- “List Shopify orders from the last 7 days that are paid but not yet fulfilled”
- “Which products have fewer than 5 units in stock at the main warehouse?”
- “Create a draft product called Linen Apron at $34 with sizes S, M and L”
- “Set the inventory for SKU MUG-BLUE to 40 units at the Brooklyn location”

## How do I run a Shopify agent on ibl.ai?

[Agentic OS](https://ibl.ai/product/agentic-os) is where the agent runs on ibl.ai: it holds the Shopify MCP connection, the model the agent uses, its instructions and its conversation history.

On ibl.ai you own all the code and the data, run it model-agnostic across any LLM, and pay with no per-seat pricing — so you can deploy anywhere, from your own cloud to a fully air-gapped network.

- [AI agents for Small Business](https://ibl.ai/solutions/small-business) — what ibl.ai deploys in this sector

### Which ibl.ai agents work with Shopify data?

- [Inventory Agent](https://ibl.ai/solutions/small-business/agent/inventory-agent) — Small Business
- [Customer Support Agent](https://ibl.ai/solutions/small-business/agent/customer-support-agent) — Small Business

### Which ibl.ai platform skills does a Shopify agent use?

- [/iblai-api-agent-mcp](https://ibl.ai/developer/skills/iblai-api-agent-mcp) — MCP connectors for ibl.ai agents, end to end
- [/iblai-vibe-agent-mcp](https://ibl.ai/developer/skills/iblai-vibe-agent-mcp) — Add the agent MCP tab (Model Context Protocol connector management with featured connectors, custom connectors, OAuth,…
- [/iblai-api-agent-tool](https://ibl.ai/developer/skills/iblai-api-agent-tool) — Enable or disable an ibl.ai agent's tools via the platform API

## What else should I know before connecting Shopify to an AI agent?

### Is there an official Shopify MCP server?

Yes. Shopify publishes [Shopify Dev MCP and Storefront MCP](https://shopify.dev/docs/apps/build/devmcp).

You can register it on ibl.ai as an MCP server, or use the SKILL.md when you want the agent to call the Shopify GraphQL Admin API directly.

### Who can get Shopify API credentials?

Developers create an app (Shopify CLI or Dev Dashboard) and install it on a store. Admin-created custom apps with pre-generated tokens are a legacy method that is no longer available for new apps.

### Does Shopify data leave my infrastructure when an ibl.ai agent uses it?

On ibl.ai, you own all the code and the data. Self-hosted in your cloud or data center, the agent, its MCP connections and its conversation logs stay inside your perimeter.

Because the platform is model-agnostic, you can point the agent at a model you host, so Shopify records need not reach a third-party model provider.

### Is the Shopify agent skill free to use?

Yes. The SKILL.md is a free download with no sign-up. It assumes you already have Shopify credentials, and your agreement with Shopify still governs how you use its API.

## Which other data sources can an AI agent connect to alongside Shopify?

### Which other Small Business systems have a connector?

- [Google Workspace](https://ibl.ai/developer/connectors/google-workspace) — Productivity and collaboration suite
- [Gusto](https://ibl.ai/developer/connectors/gusto) — Payroll and HR platform
- [HubSpot](https://ibl.ai/developer/connectors/hubspot) — Customer relationship management (CRM)
- [Mailchimp](https://ibl.ai/developer/connectors/mailchimp) — Email marketing platform
- [Microsoft 365 & SharePoint](https://ibl.ai/developer/connectors/microsoft-365) — Productivity and collaboration suite
- [Oracle NetSuite](https://ibl.ai/developer/connectors/oracle-netsuite) — Cloud ERP and accounting
- [PayPal](https://ibl.ai/developer/connectors/paypal) — Online payments platform
- [QuickBooks Online](https://ibl.ai/developer/connectors/quickbooks-online) — Small-business accounting software
- [Square](https://ibl.ai/developer/connectors/square) — Point-of-sale and payments platform
- [Stripe](https://ibl.ai/developer/connectors/stripe) — Online payments and billing platform
- [Xero](https://ibl.ai/developer/connectors/xero) — Small-business accounting software

Every connector, grouped by sector, is on the [connectors hub](https://ibl.ai/developer/connectors).
