// SCAN REPORT

Kockatoos Shopify MCP Server

136 tools. 83 can modify or destroy data without limits.

21 destructive tools with no built-in limits. Policy required.

Last updated:

83 can modify or destroy data
53 read-only
136 tools total

Community server · catalogue entry verified 03/07/2026

How to control Kockatoos Shopify MCP Server ↓

TOOL MAP

What Kockatoos Shopify MCP Server exposes to your agents

Read (53) Write / Execute (62) Destructive / Financial (21)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Kockatoos Shopify MCP Server tools

Financial · Critical complete_draft_order This tool finalizes a draft order into a real order and can mark it as paid, which constitutes a financial commitment and transaction. Destructive · High cancel_fulfillment Cancelling a fulfillment is effectively irreversible in terms of the fulfillment record and triggers side effects (restocking inventory, changing fulfillment status to cancelled) that can disrupt order fulfillment workfl Destructive · High cancel_order Cancelling an order is generally irreversible in practice: it stops fulfillment, notifies the customer, and may trigger a refund. Destructive · High delete_automatic_discount This tool irreversibly removes data (an automatic discount) from a Shopify store with no recovery mechanism.

83 of Kockatoos Shopify MCP Server's 136 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Kockatoos Shopify MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Kockatoos Shopify MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "complete_draft_order": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "cancel_fulfillment": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "activate_automatic_discount": {
    "limits": [
      {
        "counter": "activate_automatic_discount_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "get_app_installation": {
    "limits": [
      {
        "counter": "get_app_installation_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Kockatoos Shopify MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON KOCKATOOS SHOPIFY →

Instant setup, no code required.

FULL CATALOGUE

All 136 Kockatoos Shopify MCP Server tools

FINANCIAL 1 tools
Financial complete_draft_order Complete a draft order, converting it into a real order. Optionally mark it as paid.
DESTRUCTIVE 20 tools
Destructive cancel_fulfillment Cancel a fulfillment. This restocks the items and sets the fulfillment status to cancelled. Destructive cancel_order Cancel an order. Optionally specify a reason and whether to send a notification email to the customer. This ma Destructive delete_automatic_discount Permanently delete an automatic discount by its GID. This cannot be undone. Destructive delete_code_discount Permanently delete a code discount by its GID. This cannot be undone. Destructive delete_custom_collection Permanently delete a custom collection. Products in it are NOT deleted. Destructive delete_customer_metafield Delete a customer metafield by its GID or numeric ID. Destructive delete_discount_code Delete a redeem code from a GraphQL code discount node. Destructive delete_draft_order Permanently delete a draft order. Cannot delete completed draft orders. Destructive delete_files Permanently delete one or more files by their GIDs. This cannot be undone. Requires write_files access scope. Destructive delete_menu Delete a navigation menu. Default menus (e.g. main-menu, footer-menu) cannot be deleted. Requires write_online Destructive delete_order_metafield Delete an order metafield by its GID or numeric ID. Destructive delete_page Permanently delete an online store page. This cannot be undone. Requires write_content or write_online_store_p Destructive delete_price_rule Delete a code discount by DiscountCodeNode ID. Preserves the legacy price-rule tool name for compatibility. Destructive delete_product Permanently delete a product by its ID. This cannot be undone. Destructive delete_product_image Delete an image from a product. Destructive delete_product_metafield Permanently delete a metafield by its GID. This cannot be undone. Destructive delete_theme Delete a theme. The active (MAIN) theme cannot be deleted. Requires write_themes access scope and a Shopify ex Destructive delete_theme_files Delete one or more files from a theme by filename. Requires write_themes access scope. Destructive delete_variant Delete a product variant. A product must always have at least one variant. Destructive delete_webhook Delete a webhook subscription.
WRITE 62 tools
Write activate_automatic_discount Activate an automatic discount that is currently inactive or scheduled. Write activate_code_discount Activate a code discount that is currently inactive or scheduled. Write add_product_to_collection Add a product to a custom collection. Write adjust_inventory Adjust inventory by a relative amount (positive to add stock, negative to remove). Requires the inventory_item Write close_order Close an order. Closed orders are considered completed and no longer active. Write create_automatic_discount_basic Create an automatic amount-off discount (percentage or fixed) that Write create_automatic_discount_bxgy Create an automatic Buy X Get Y discount applied without a code. Write create_automatic_discount_free_shipping Create an automatic free shipping discount applied without a code when order meets criteria. Write create_bundle Create a fixed product bundle using the Shopify Bundles app. Groups multiple component products into a single Write create_code_discount_basic Create an amount-off code discount (percentage or fixed) that customers apply at checkout. Supports product/co Write create_code_discount_bxgy Create a Buy X Get Y (BXGY) code discount. Customers enter a code to get a discount when they buy specified it Write create_code_discount_free_shipping Create a free shipping code discount. Customers enter a code to get free (or discounted) shipping. Write create_custom_collection Create a new custom (manual) collection. Optionally include product IDs to add to it. Write create_customer Create a new customer. At minimum provide an email. Optionally include name, phone, address, and tags. Write create_discount_code Set the customer-facing code for a basic GraphQL code discount node. Write create_draft_order Create a new draft order. Provide line items (variant-based or custom), an optional customer, and shipping/bil Write create_file Create a file asset in the store from an external URL or a staged upload URL. Supports images, videos, 3D mode Write create_fulfillment Create a fulfillment for one or more fulfillment orders. This marks items as shipped and optionally adds track Write create_menu Create a new navigation menu for the online store. Requires write_online_store_navigation access scope. Write create_metafield_definition Create a new metafield definition for products at the store level. Definitions establish structure and validat Write create_page Create a new online store page (e.g. About Us, Contact, policy pages). Requires write_content or write_online_ Write create_price_rule Create a modern basic code discount through GraphQL. Preserves the legacy price-rule tool name for compatibili Write create_product Create a new product. At minimum provide a title. The product is created in Write create_product_image Add an image to a product by URL. Optionally assign it to specific variants. Write create_smart_collection Create a new smart (automatic) collection with rules that determine which products are included. Write create_theme Create a new theme from a public ZIP URL or a staged upload URL. New themes are UNPUBLISHED by default. Requir Write create_variant Create a new variant for a product. Must specify at least one option value. Write create_webhook Create a new webhook subscription. Common topics: orders/create, orders/updated, products/create, products/upd Write deactivate_automatic_discount Deactivate (pause) an automatic discount without deleting it. Write deactivate_code_discount Deactivate (pause) a code discount without deleting it. Write publish_theme Publish a theme, making it the live storefront theme (MAIN role). Requires write_themes access scope and a Sho Write remove_product_from_collection Remove a product from a custom collection. Write reorder_collection_products Reorder products in a custom collection. Provide an ordered array of product IDs. The collection Write send_draft_order_invoice Send an invoice email for a draft order with a secure checkout link. Write set_customer_metafield Create or update a customer metafield using metafieldsSet (upsert). Write set_inventory Set inventory to an absolute quantity at a given location. This overwrites the current available quantity. Write set_order_metafield Create or update an order metafield using metafieldsSet (upsert). Write set_product_metafield Create or update a metafield on a product using the GraphQL Write stage_upload Generate a pre-signed staged upload target for a file. This is step 1 of Shopify Write update_automatic_discount_basic Update an existing basic automatic discount. Only provided fields are changed. Write update_automatic_discount_bxgy Update an existing automatic BXGY discount. Only provided fields are changed. Write update_automatic_discount_free_shipping Update an existing automatic free shipping discount. Only provided fields are changed. Write update_bundle Update an existing product bundle. Providing components replaces ALL current components — omit components to l Write update_code_discount_basic Update an existing basic (amount-off) code discount. Only provided fields are changed. Write update_code_discount_bxgy Update an existing BXGY code discount. Only provided fields are changed. Write update_code_discount_free_shipping Update an existing free shipping code discount. Only provided fields are changed. Write update_custom_collection Update an existing custom collection. Only provided fields are changed. Write update_customer Update an existing customer. Only provided fields are changed; omitted fields remain unchanged. Write update_draft_order Update an existing draft order. Only provided fields are changed. Write update_file Update a file Write update_fulfillment_tracking Update tracking information for an existing fulfillment. Write update_menu Update an existing navigation menu Write update_order Update an existing order. Typically used to add/edit notes or tags. Only provided fields are changed. Write update_page Update an existing online store page. Only provided fields are changed. Requires write_content or write_online Write update_price_rule Update a modern basic code discount through GraphQL. Preserves the legacy price-rule tool name for compatibili Write update_product Update an existing product. Only provided fields are changed; omitted fields remain unchanged. Write update_product_image Update a product image (change alt text, position, or variant assignments). Write update_smart_collection Update a smart (automatic) collection Write update_theme Update a theme Write update_variant Update an existing product variant. Only provided fields are changed. Write update_webhook Update an existing webhook subscription Write upsert_theme_files Create or update theme files (up to 50 per request). Provide file content as text or base64. Requires write_th
READ 53 tools
Read get_app_installation Get details of a specific app installation by its GID, including access scopes and active subscriptions. Read get_automatic_discount Get an automatic discount by its GID (e.g. Read get_bundle Get full details of a bundle product including its component products, quantities, and option mappings. Uses G Read get_bundle_operation Poll the status of an asynchronous bundle create or update operation. Status values: CREATED (queued), ACTIVE Read get_code_discount Get a code discount by its GID (e.g. Read get_custom_collection Get full details of a single custom collection by its ID. Read get_customer Get full details of a single customer by their ID, including addresses, order count, and total spent. Read get_customer_metafield Get a single customer metafield by namespace and key. Read get_draft_order Get full details of a single draft order by its ID. Read get_location Get details of a single location by its ID. Read get_menu Get a navigation menu by its handle, including its full nested item structure. Read get_order Get full details of a single order by its ID, including line items, shipping address, fulfillments, and transa Read get_order_metafield Get a single order metafield by namespace and key. Read get_page Get full details of a single online store page by its ID, including body HTML. Requires read_content or read_o Read get_price_rule Get a code discount by DiscountCodeNode ID. This compatibility tool replaces the older Price Rules workflow. Read get_product Get full details of a single product by its ID, including all variants, images, and options. Read get_product_image Get details of a single product image. Read get_product_metafield Get a single metafield by namespace and key for a given product via GraphQL. Uses jsonValue for proper seriali Read get_shop_info Get basic information about the Shopify store: name, domain, email, plan, currency, timezone, and more. Read get_smart_collection Get full details of a single smart collection by its ID, including its rules. Read get_theme Get details of a single theme by its GID. Requires read_themes access scope. Read get_theme_files Get one or more specific theme files by their filenames, including their full content. Requires read_themes ac Read get_variant Get full details of a single product variant by its ID. Read get_webhook Get details of a single webhook subscription. Read list_app_installations List apps installed on the store. Returns details about each app installation including the app name, access s Read list_automatic_discounts List automatic discounts (applied without a code) using the GraphQL API. Supports filtering by status, type, a Read list_code_discounts List code discounts using the GraphQL API. Returns basic, BXGY, and free shipping code discounts. Supports fil Read list_collection_products List all products belonging to a specific collection (custom or smart). Read list_custom_collections List custom (manual) collections. These are collections where the merchant manually selects which products to Read list_customer_metafields List all metafields for a customer via GraphQL. Read list_customers List customers in the store. Supports pagination and basic filtering by creation date. Read list_discount_codes List redeem codes for a GraphQL code discount node. Read list_draft_orders List draft orders in the store. Draft orders can be used to create orders on behalf of customers. Read list_files List files uploaded to the store (images, videos, documents, etc.). Supports filtering by media type, filename Read list_fulfillment_orders List fulfillment orders for an order. Fulfillment orders represent groups of items to be fulfilled from a spec Read list_fulfillments List all fulfillments for an order, including tracking info and status. Read list_inventory_levels List inventory levels (stock quantities) for a given location. Returns available quantities for each inventory Read list_locations List all locations (warehouses, stores, etc.) configured for this Shopify store. Each location has an ID used Read list_menus List all navigation menus in the store via GraphQL. Read list_metafield_definitions List all metafield definitions for products at the store level. Returns namespace, key, type, name, descriptio Read list_order_metafields List all metafields for an order via GraphQL. Read list_orders List orders in the store. By default returns open orders. Use Read list_pages List online store pages (e.g. About Us, Contact, policy pages). Supports filtering by title, handle, published Read list_price_rules List code discounts using the Admin GraphQL API. This compatibility tool replaces the older Price Rules workfl Read list_product_images List all images for a product. Read list_product_metafields List all metafields attached to a product via GraphQL. Returns key, namespace, type, jsonValue, and more. Opti Read list_products List products in the store. Returns up to Read list_smart_collections List smart (automatic) collections. These are collections where products are automatically included based on r Read list_theme_files List all files in a theme (templates, assets, sections, snippets, config, locales). Requires read_themes acces Read list_themes List all themes installed on the online store. Filter by role to find the published (MAIN) theme, unpublished Read list_variants List all variants of a product. Each variant represents a specific purchasable SKU with its own price, invento Read list_webhooks List all webhook subscriptions for this app. Read search_customers Search for customers using a query string. Supports Shopify search syntax (e.g.
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
admin
Nodebench 824 tools
admin
UnClick 813 tools
admin
Binance MCP Server 734 tools
admin
Pfsense 680 tools
admin
AdButler 622 tools
admin
Fortimanager 584 tools
admin
Crow 573 tools
admin
FAQ

Questions about Kockatoos Shopify MCP Server

Can an AI agent move money through the Kockatoos Shopify MCP Server MCP server? +

Yes. The Kockatoos Shopify MCP Server server exposes 1 financial tools including complete_draft_order. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Kockatoos Shopify MCP Server MCP server? +

Yes. The Kockatoos Shopify MCP Server server exposes 20 destructive tools including cancel_fulfillment, cancel_order, delete_automatic_discount. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Kockatoos Shopify MCP Server? +

The Kockatoos Shopify MCP Server server has 62 write tools including activate_automatic_discount, activate_code_discount, add_product_to_collection. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Kockatoos Shopify MCP Server.

How many tools does the Kockatoos Shopify MCP Server MCP server expose? +

136 tools across 3 categories: Destructive, Read, Write. 53 are read-only. 83 can modify, create, or delete data.

How do I enforce a policy on Kockatoos Shopify MCP Server? +

Register the Kockatoos Shopify MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Kockatoos Shopify MCP Server tool call.

Deterministic rules across all 136 Kockatoos Shopify MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON KOCKATOOS SHOPIFY →

Instant setup, no code required.

136 Kockatoos Shopify MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.