MCP Server Policy

SHOPIFY DEV MCP POLICY

Enforce policies on every tool call to the Shopify Dev MCP Server. 6 tools listed, categorised, and ready for rules.

Shopify/dev-mcp 2 read 4 write 6 tools total
shopify e-commerce graphql themes storefronts

GET STARTED

Download this policy scaffold and add your rules. Intercept enforces them on every tool call before it reaches Shopify Dev.

terminal

# Download policy scaffold

curl -o shopify.yaml https://raw.githubusercontent.com/policylayer/intercept/main/policies/shopify.yaml

# Run with Intercept

intercept --policy shopify.yaml -- npx -y @Shopify/dev-mcp

Server documentation: https://github.com/Shopify/dev-mcp

READ TOOLS

2

OTHER TOOLS

4

POLICY YAML

This scaffold lists every tool with empty rules. Add conditions — rate limits, argument validation, deny rules — then deploy with Intercept.

shopify.yaml 
version: "1"
description: "Policy for Shopify/dev-mcp"
default: "allow"
tools:
    fetch_full_docs:
        rules: []
    search_docs_chunks:
        rules: []
    introspect_admin_schema:
        rules: []
    learn_shopify_api:
        rules: []
    validate_graphql_codeblocks:
        rules: []
    validate_theme_codeblocks:
        rules: []

RELATED POLICIES

PayPal 30 tools
e-commerce
Apollo GraphQL 1 tools
graphql

FREQUENTLY ASKED QUESTIONS

What tools does the Shopify Dev MCP server expose?

The Shopify Dev MCP Server exposes 6 tools across 2 categories: Read, Other. Each tool can be individually controlled with Intercept policies.

How do I enforce policies on Shopify Dev?

Download the policy scaffold, add rules (rate limits, argument validation, deny rules), then run Intercept as a proxy in front of the Shopify Dev MCP server. Every tool call is evaluated against your YAML policy before execution.

Is the Shopify Dev policy free to use?

Yes. All Intercept policies are open source under the Apache 2.0 licence. Download, modify, and deploy without restrictions.

ENFORCE POLICIES ON SHOPIFY DEV

Open source. One binary. Zero dependencies.

VIEW ON GITHUB Browse all policies →