Get started

Shopify for AI agents

Shopify is an ecommerce platform that runs online stores, from product catalogs to checkout, orders, and fulfillment. Merchants of all sizes use it to sell products and manage inventory. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

Connect ShopifySee the 407 actions ↓
E-commerceOAuth 2.0MCP + RESTshopify.com
AUDIT LOG · SHOPIFYPOLICY: acme-support
09:41:07 · claude · u_8f2read
shopify.list_blogs
Retrieve a list of all blogs✓ allowed · 212ms
09:41:08 · claude · u_8f2read
shopify.get_app
Get App✓ allowed · 164ms
09:41:09 · claude · u_8f2write
shopify.create_blog
Create a new blog✓ approved · approved by user
09:41:12 · claude · u_8f2destructive
shopify.delete_blog
Delete a blog✕ blocked · policy: deny
EVERY SHOPIFY CALL, ON THE RECORD
01 · USE CASES

What agents do in Shopify.

01

Adjust inventory levels

Update the inventory count for a product at a specific location after a stock check.

02

Review an order before cancelling

Look up an order's status and items before cancelling it, since cancellation can trigger a refund.

03

Complete a draft order

Finalize a draft order into a real order once pricing and items are confirmed.

02 · ACTIONS

407 Shopify actions, graded by risk.

Every Shopify action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

206

Look things up. Allowed by default.

  • shopify.get_app
    Get App
  • shopify.get_blog
    Get Single Blog
  • shopify.get_event
    Get event by ID
  • shopify.get_order
    Get order
  • shopify.get_theme
    Retrieve a single theme
  • shopify.query_job
    Query job
  • shopify.get_events
    Get events list (Deprecated)
  • shopify.get_themes
    Get themes
  • shopify.list_blogs
    Retrieve a list of all blogs
  • shopify.list_order
    List orders (Deprecated)
  • shopify.list_pages
    Retrieve list of pages
  • shopify.query_node
    Query node by ID
  • shopify.query_shop
    Query Shop (GraphQL)
  • shopify.get_article
    Get Article
  • shopify.get_country
    Get country
  • shopify.get_product
    Get product
+ 190 MORE

write

152

Create and change things. Allow, or ask the user first.

  • shopify.create_blog
    Create a new blog
  • shopify.create_page
    Create a new page
  • shopify.update_blog
    Modify an existing blog
  • shopify.update_page
    Update Page
  • shopify.create_order
    Create an order
  • shopify.create_theme
    Create Theme
  • shopify.send_invoice
    Send an invoice
  • shopify.update_order
    Update Order
  • shopify.update_theme
    Modify existing theme
  • shopify.create_article
    Create Article
  • shopify.create_country
    Create Country
  • shopify.create_product
    Create a product (Deprecated)
  • shopify.create_webhook
    Create Webhook (Deprecated)
  • shopify.update_article
    Update Article
  • shopify.update_comment
    Update Comment
  • shopify.update_country
    Update Country
+ 136 MORE

destructive

49

Delete, cancel or archive. Ask first, or deny outright.

  • shopify.delete_blog
    Delete a blog
  • shopify.delete_page
    Delete a page
  • shopify.cancel_order
    Cancel an order
  • shopify.delete_order
    Delete an order
  • shopify.delete_theme
    Delete theme
  • shopify.delete_article
    Delete Article
  • shopify.delete_collect
    Remove product from collection
  • shopify.delete_comment
    Remove a comment
  • shopify.delete_country
    Delete country
  • shopify.delete_product
    Delete a product
  • shopify.delete_webhook
    Delete webhook subscription (Deprecated)
  • shopify.delete_customer
    Delete a customer
  • shopify.delete_redirect
    Delete redirect
  • shopify.delete_metafield
    Delete a metafield by its ID
  • shopify.delete_metaobject
    Delete metaobject
  • shopify.delete_order_risk
    Delete order risk
+ 33 MORE
03 · HOW IT WORKS

Shopify in three steps.

  1. 01Your users connect ShopifyThey sign in to Shopify on Arc0 Connect, under your brand, and approve the access you ask for.
  2. 02You set the rulesReads run, writes like “create a new blog” can wait for the user, and “delete a blog” can be denied outright.
  3. 03Any agent can actYour agent calls Shopify through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
POLICY.TS
await arc0.policies.set('shopify', {
  read: 'allow',
  write: 'ask',        // create_blog
  destructive: 'deny',  // delete_blog
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2
04 · AUTH AND DATA

How Shopify connects.

Users sign in to Shopify on Arc0 Connect and approve the scopes you request. Build with Arc0’s Shopify OAuth app, or bring your own so the Shopify consent screen names you. Tokens refresh automatically, and you can export them whenever you want.

The same Shopify connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH
API key · OAuth 2.0 · OAuth 2.0 client credentials
CREDENTIALS
Per-tenant encrypted vault
MODEL SEES
Results only, never credentials
AUDIT LOG
Every call, on every plan
05 · WORKS WITH

Use Shopify from any agent.

Claude
ChatGPT
Cursor
Codex
VS Code
OpenAI Agents SDK
Claude Agent SDK
Vercel AI SDK
Mastra
LangGraph
06 · RELATED

More e-commerce apps.

Alpaca100 actionsClover209 actionsCloudcart150 actionsBaselinker106 actionsShippo95 actionsShipengine66 actionsProabono64 actionsLoyverse58 actions
ALL E-COMMERCE APPS →
07 · FAQ

Shopify and Arc0, answered.

Q01

Can I use Shopify with Claude, ChatGPT or Cursor?

Yes. Connect Shopify to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Shopify actions you allow.

Q02

How do users connect Shopify?

Users sign in to Shopify on Arc0 Connect and approve the scopes you request. Build with Arc0’s Shopify OAuth app, or bring your own so the Shopify consent screen names you. Tokens refresh automatically, and you can export them whenever you want.

Q03

Which Shopify actions can my agent take?

407 in total: 206 read, 152 write and 49 destructive, such as “create a new blog”. Your policies decide which of them each agent may call.

Q04

Can I stop my agent from deleting things in Shopify?

Yes. Actions like “delete a blog” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.

Q05

Can my own backend call Shopify too?

Yes. The same Shopify connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Shopify into your agent.

Your users connect Shopify once, under your brand. Your agent gets 407 actions behind your policies, with every call on the record.

Connect ShopifyBrowse all apps →

Free to build · MCP + REST · Audit log on every plan