shopify.com
Shopify is a commerce platform for creating and operating online stores, checkout, payments, and retail sales. It also provides developer tooling for apps, custom storefronts, and AI-powered shopping and store-management experiences.
Shopify exposes GraphQL APIs for Admin, Storefront, and Partner access, MCP servers for storefront and setup flows, and the `shopify` CLI; auth varies by surface, including Admin/Partner tokens, Storefront tokens or tokenless access, OAuth for customer-account/setup flows, and CLI browser login.
- Shopify Storefront MCP serverdetected
- Shopify Setup MCP serverdetected
- Shopify GraphQL Admin APIdiscovered
- Shopify CLIdiscovered
Create a Shopify app in the Shopify Partner Dashboard, configure its access scopes, then install it on a store and complete the app auth flow described in About app authentication. Shopify issues an online or offline access token for that store; your app sends it in X-Shopify-Access-Token on Admin API requests.
Create a Shopify app, add customer account redirect URIs in shopify.app.toml, deploy it, request protected customer data access in the Shopify Partner dashboard, and install the app on the store, following the steps in Customer Accounts MCP server authentication. Your app then discovers the store's OpenID configuration and runs the OAuth 2.0 authorization code flow with PKCE to obtain a customer access token.
$ shopify auth loginAcquired by the CLI — running shopify auth login opens the auth flow and stores the credential.
conventions · 1/8 published
- integrations.json✗
/.well-known/integrations.json - llms.txt✓https://shopify.com/llms.txt
- API catalog✗
/.well-known/api-catalog - OpenAPI document✗
/api/schema/, /openapi.json, /swagger.json, /api/openapi.json, or /v1/openapi.json - MCP server card✗
/.well-known/mcp/server-card.json - OAuth protected resource✗
/.well-known/oauth-protected-resource - Agent card✗
/.well-known/agent-card.json - Agent skills✗
/.well-known/agent-skills/index.json
Publish these signals → /publishing