PlugWiki
Shopify Dev MCP logo

Shopify Dev MCP, Shopify's official server for app and theme developers

Official · by ShopifyLocal
Getnpm@shopify/dev-mcpDocs

Lets Claude, Cursor or Codex look up Shopify docs and check your code while you build apps and themes. It needs no store login and changes nothing.

This is Shopify's official helper for developers building apps, themes and extensions. It lets your coding assistant search Shopify's docs and check GraphQL, Liquid and extension code, and it never touches a store. Usage data, which can include what you ask, goes to Shopify unless you opt out. To run a store from chat, use Shopify's connector in Claude or ChatGPT instead, and see the table below for shopping and customer agents.

Good for

  • Developers building Shopify apps and checkout extensions
  • Theme developers who want Liquid files checked before deploying
  • Teams moving an app to a newer Shopify API version
  • Not for store owners: use Shopify's connector in Claude instead

Works in

4 supported · 8 should work

Tap an app to see how to set it up and any known problems.

Install Shopify Dev MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the Shopify Dev MCP server to Claude Code. Run this command:
    
    claude mcp add --transport stdio shopify-dev-mcp -- npx -y @shopify/dev-mcp@latest
    
    Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

This is Shopify's Dev MCP: it searches Shopify docs and API schemas and checks GraphQL, Liquid and UI-extension code. It does not connect to a store, needs no account or API key, and runs locally over stdio. There is no hosted URL. Telemetry is on by default and can include tool inputs and results; to opt out, create an empty file at ~/.config/shopify-ai-toolkit/opt-out (Windows: %APPDATA%\shopify-ai-toolkit\opt-out), or set OPT_OUT_INSTRUMENTATION=true. To work on a live store, use Shopify's own connectors instead (for merchants: https://setup.shopify.com/mcp in Claude). Restart your client after adding it. Shopify recommends the AI Toolkit plugin when your client supports plugins (it updates itself); the server alone is for clients without plugins.

From the vendor's docs. Source.

Tools

  • Searches Shopify.dev for relevant docs and code examples

    Searches shopify.dev for the passages and code examples that best match your question. Use it to get current reference instead of relying on model memory.

    Try: “How do I query product variants with the GraphQL Admin API?”

    Network · search_docs_chunks

  • Checks GraphQL and UI component code against Shopify schemas

    Validates GraphQL operations and UI components against bundled Shopify references to catch invented types, fields, components and props. One call checks one API. Use it after the assistant writes or edits Shopify code.

    Try: “Validate this GraphQL query against the Admin API”

    Read · validate

  • Checks a whole theme directory for Liquid and file errors

    Validates the Liquid and supporting files in a Shopify theme folder, such as JSON, JavaScript, CSS and SVG, for invalid syntax or made-up references. Present in the default full mode. Use it after changing theme files.

    Try: “Validate the theme folder in my project”

    Files · validate_theme

  • Used by the assistant behind the scenes

    Loads the right Shopify API context before any other tool

    The required first step: it teaches the assistant which Shopify API you are working with, returns the supported versions and gives a conversation ID that the other tools need. Call it again when you switch to a different API.

    Try: “Help me build a Shopify Function, start by loading the right API”

    Network · learn_shopify_api

  • Reports how well the toolkit worked in this turn

    Sends a one-time scorecard to Shopify grading how the toolkit's tools performed. The assistant calls it, not you, near the end of a first turn.

    Try: “Report how the Shopify tools did”

    Write · feedback

Read from the source code

Pros and cons

Good

  • Official Shopify tool that needs no store login, account or API key
  • Free to use under the ISC license
  • Checks GraphQL queries, Liquid files, theme folders and extension code against Shopify's own schemas
  • Cannot read or change any store data
  • Shopify also ships it inside the AI Toolkit plugin, which updates itself

Watch out

  • Sends usage events to Shopify by default, including tool inputs
  • Answers can be very large and use up your context window
  • Runs on your computer only, with no hosted address
  • Needs Node.js 18 or later
  • Updates ship weekly with no release notes
  • Cannot help with store tasks such as orders or inventory

Permissions

low risk · 4 things to watch

Low risk

It only reads docs and checks code, so the main risk is that usage data goes to Shopify by default, including what you ask.

What it can do

Watch out for

  • Usage data goes to Shopify, including your prompts

    Usage events can include what you ask and what the tools return. Turn it off with an empty opt-out file in your Shopify AI Toolkit config folder; the environment variable alone may not reach apps launched from the desktop. npmjs.com

  • Shopify has not said how long it keeps this data

    A user reports the server asks the model to pass your latest message word for word. Shopify has not said how it stores or uses this, so opt out if your code is private. github.com

  • Some bundled libraries have known security flaws

    npm audit flags three pinned libraries as high severity. The reporter says the affected paths do not look reachable when the server runs locally. github.com

  • No source link or release notes on npm

    The package has no repository link or provenance proof, and updates arrive about weekly. Pin a version if you need stable behaviour. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyThe server is read-only by design. It searches Shopify's public docs and schemas and checks code or theme files you point it at. It has no store login and no tools that change store data.
Talks toUsage events go to shopify.dev/mcp/usage unless you opt out
Sign-in and keysNone. It runs on your computer with no sign-in.
Data retentionShopify has not documented how long usage data is kept or what it is used for.

Alternatives

Use this server to build apps and themes, or the AI Toolkit plugin if your coding app supports plugins. Store owners should use Shopify's connector in Claude, and agents that shop or serve customers need the hosted options.

ServerOfficialRunsBest forStore data
For Shopify
Shopify Dev MCPThis pageOfficialLocalDevelopersNone
Other tools for the same job
Shopify AI Toolkit pluginOfficial–DevelopersVia CLI
Shopify connector in ClaudeOfficialHostedStore ownersOrders, products
Shop MCP and CatalogOfficialHostedShopping agentsCatalog, checkout
Store UCP endpointOfficialHostedOne store's assistantCatalog, cart
Customer Accounts MCPOfficialHostedCustomer assistantsOrders, account

What people say

Developers like the better Shopify code it produces and dislike the oversized answers and the default usage reporting.

What people like

  • Gives the coding assistant Shopify's current docs, so it stops writing outdated syntax or fields that do not exist

Common complaints

  • Answers are very large and fill the context window quickly
  • Usage data is sent to Shopify by default, and how it is kept or used is not documented
  • Updates ship almost weekly with no release notes
  • Pinned libraries carry high-severity security warnings that users cannot fix themselves
  • Breaks after updates when the npx cache holds stale files

In their words

1 more quote

Questions

Which Shopify MCP server do I need?

Building apps or themes: this server or the AI Toolkit plugin. Running a store from chat: the Shopify connector in Claude or ChatGPT. Building a shopping agent: Shop MCP, Global Catalog or a store's UCP endpoint. Answering signed-in customers: Customer Accounts MCP.

Can the Shopify Dev MCP read or change my store's orders and products?

No. It runs on your computer with no sign-in and only searches Shopify docs and API schemas and checks code. For store data, use the Shopify connector in Claude or ChatGPT, or the Shopify CLI connector for coding apps.

Is it free, and do I need a Shopify account or API key?

It is free under the ISC license, and you need no Shopify account or key. You do need Node.js 18 or later.

Should I install the Dev MCP or the Shopify AI Toolkit plugin?

Shopify recommends the plugin when your app supports it, because it updates itself and adds skills. Use the Dev MCP alone for apps without plugin support.

Is there a hosted URL for the Shopify Dev MCP?

No. Shopify staff say it is designed to run on your own computer. Tools that only accept remote servers need you to host it yourself.

Does it send data to Shopify, and how do I turn that off?

Yes. Usage events can include tool inputs and results. Create an empty file at ~/.config/shopify-ai-toolkit/opt-out (Windows: %APPDATA%\shopify-ai-toolkit\opt-out), or set OPT_OUT_INSTRUMENTATION=true or DO_NOT_TRACK=1. The file is the reliable method for apps launched from the desktop.

Why does it fail to start after an update?

A stale npx cache is the usual cause. Delete the _npx folder in your npm cache (find it with npm config get cache), run the server once, then restart your app.

How do I check a single Liquid snippet instead of a whole theme?

Set LIQUID_VALIDATION_MODE=partial in the server's environment. The default, full, checks whole theme folders.

Does it work on Windows with Cursor?

Yes. If Cursor reports connection errors, Shopify's docs say to use cmd as the command with /k, npx, -y and @shopify/dev-mcp@latest as the arguments.

Is the Storefront MCP still available?

Not at its old address. Shopify removed the catalog and cart tools at /api/mcp and moved them to each store's UCP endpoint at https://{shop}/api/ucp/mcp.

Examples

  • Migrate a checkout UI extension to a newer API version, then review and test it.

    Migrate the extensions/my-checkout-extension extension to API version 2026-04.

    Source
  • Check a GraphQL Admin API query against Shopify's schema before shipping it.

    Validate this Admin API query against the current schema and fix any fields that do not exist.

  • Validate a theme folder's Liquid files with Theme Check before deploying.

    Run Theme Check on the theme folder and list every error with the file and line.

Information

updated Nov 2, 2026

Publisher
Shopify (official)
Package
@shopify/dev-mcp
Registry
npm
Transport
stdio
Auth
None
Version
1.18.0
License
ISC

Shopify AI Toolkit docsnpmShopify Developer Community

Other Shopify MCP servers

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 19
  1. Shopify AI Toolkit · shopify.dev
  2. @shopify/dev-mcp · npmjs.com
  3. Shopify AI Toolkit · github.com
  4. Shopify connector for Claude · claude.com
  5. @shopify/dev-mcp: release notes, source link, and two telemetry questions · github.com
  6. @shopify/dev-mcp pins vulnerable dependency versions · github.com
  7. Shopify agents · shopify.dev
  8. Shopify MCP Serveur URL · community.shopify.dev
  9. Problems setting up the local MCP Server through Claude code · community.shopify.dev
  10. Storefront MCP · shopify.dev
  11. Large MCP response · community.shopify.dev
  12. Shopify Dev MCP not working on Cursor · community.shopify.dev
  13. Shopify AI Toolkit VS Code failed to update · community.shopify.dev
  14. Hydrogen validator missing dependencies · github.com
  15. Plugin missing from curated list · github.com
  16. How to use Cursor AI for Shopify development · instant.so
  17. Shop MCP · shopify.dev
  18. Global Catalog · shopify.dev
  19. Customer Accounts MCP · shopify.dev

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.