Developers & agents
MCP tool reference
Tools exposed over the merchant-scoped MCP endpoint. The public endpoint exposes catalog + cart + checkout-prep; customer-account and B2B tools require a per-request Customer Account token.
| Tool | Inputs | Returns |
|---|---|---|
shopify_search_products | query (optional — omit to browse), limit ≤25, minPrice, maxPrice | Image-aware product summaries; over-budget items filtered server-side. |
shopify_get_product | handle | Product detail + variant GIDs; product copy returned as untrusted. |
shopify_create_cart | lines[] (variant GID + qty, optional sellingPlanId), idempotencyKey | A real Storefront cart; no checkout URL. |
shopify_add_to_cart | lines[], idempotencyKey | Updated cart; no checkout URL. |
shopify_show_cart | — | Cart lines, subtotal, total estimate, purchasability. |
shopify_prepare_checkout | confirmation (exact phrase), idempotencyKey | Shopify-hosted checkout URL — only when the exact confirmation is supplied. |
shopify_get_merchant_context | pageQuery, includeMetaobjects | Read-only shop profile, policies, FAQ/pages — returned as untrusted data. |
shopify_get_customer_context | customerAccessToken (per request), orderLimit | Redacted order/account summary + hosted account handoff links. No PII stored. |
shopify_list_b2b_company_locations | customerAccessToken, limit | Company locations for the authenticated account (token-free handle). |
shopify_select_b2b_company_location | customerAccessToken, companyLocationId | Validated buyer-context handle for later cart/product calls. |
Checkout gate
Checkout is withheld until the buyer sends the exact phrase, verbatim:
I understand checkout continues in Shopify
Paraphrases are rejected and the agent must not supply the phrase itself.