// SCAN REPORT

Shopify Graphql

319 tools. 182 can modify or destroy data without limits.

53 destructive tools with no built-in limits. Policy required.

Last updated:

182 can modify or destroy data
137 read-only
319 tools total

Community server · catalogue entry verified 30/06/2026

How to control Shopify Graphql ↓

TOOL MAP

What Shopify Graphql exposes to your agents

Read (137) Write / Execute (129) Destructive / Financial (53)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Shopify Graphql tools

Financial · High create_payment_customization Creating payment customizations on a Shopify store can alter payment terms, methods, pricing, or financial workflows. Financial · Critical create_payment_terms Creating payment terms is a financial operation that establishes future payment obligations and cash flow expectations. Financial · High create_refund Refunds are inherently financial transactions that reverse payments and return funds to customers. Financial · Critical add_cash_transaction This tool records/adds a cash transaction, which directly involves financial operations.

182 of Shopify Graphql's 319 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Shopify Graphql

PolicyLayer is an MCP gateway — it sits between your AI agents and Shopify Graphql, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "add_cash_transaction": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "cancel_fulfillment_order": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "activate_location": {
    "limits": [
      {
        "counter": "activate_location_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "accept_fulfillment_request": {
    "limits": [
      {
        "counter": "accept_fulfillment_request_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Shopify Graphql — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON SHOPIFY GRAPHQL →

Instant setup, no code required.

FULL CATALOGUE

All 319 Shopify Graphql tools

FINANCIAL 10 tools
Financial add_cash_transaction Add a cash transaction to a tracking session Financial capture_order_payment Capture payment for an authorized transaction. Use this to claim money that was previously reserved by an auth Financial create_gift_card Create a new gift card Financial create_payment_customization Create a new payment customization Financial create_payment_terms Create new payment terms Financial create_refund Create a refund for an order. Supports refunding line items, shipping costs, and processing refunds through di Financial create_shopify_payments_alternate_currency_payout Create an alternate currency payout for a Shopify Payments account Financial create_subscription_contract Create a new subscription contract Financial debit_gift_card Debit (deduct) from a gift card. Creates a debit transaction that decreases the gift card balance. Financial debit_store_credit_account Debit funds from a store credit account
DESTRUCTIVE 43 tools
Destructive cancel_fulfillment_order Cancel a fulfillment order. Destructive cancel_order Cancel an order Destructive cancel_subscription_contract Cancel a subscription contract Destructive delete_app_proxy Delete an app proxy Destructive delete_cart_transform Delete a cart transform Destructive delete_channel Delete a sales channel Destructive delete_collection Delete a collection Destructive delete_company Delete a B2B company Destructive delete_company_contact Delete a company contact Destructive delete_custom_fulfillment_service Delete a custom fulfillment service Destructive delete_custom_pixel Delete a custom pixel Destructive delete_customer Delete a customer from the store Destructive delete_customer_address Delete a customer Destructive delete_delivery_customization Delete a delivery customization rule Destructive delete_delivery_option_generator Delete a delivery option generator Destructive delete_discount Delete a discount code Destructive delete_draft_order Delete a draft order Destructive delete_file Delete a file Destructive delete_fulfillment_constraint_rule Delete a fulfillment constraint rule Destructive delete_location Delete a location from the store Destructive delete_market Delete a market Destructive delete_marketing_engagements Delete all channel-level marketing engagement data. Marks data such that it no longer appears in reports. Acti Destructive delete_marketing_event Delete a marketing event Destructive delete_menu Delete a navigation menu Destructive delete_metaobject Delete a metaobject Destructive delete_metaobject_definition Delete a metaobject definition. Also deletes all related metafield definitions, metaobjects, and metafields as Destructive delete_order Permanently delete an order. Only certain order types can be deleted. This action is irreversible. Destructive delete_packing_slip_template Delete a packing slip template Destructive delete_page Delete a page Destructive delete_payment_customization Delete a payment customization Destructive delete_payment_terms Delete payment terms Destructive delete_pixel Delete a pixel Destructive delete_price_rule Delete a price rule Destructive delete_product Delete a product from the store Destructive delete_script_tag Delete a script tag Destructive delete_theme Delete a theme Destructive delete_validation Delete a validation rule Destructive delete_webhook_subscription Delete a webhook subscription and stop all future webhooks to its endpoint Destructive expire_subscription_contract Expire a subscription contract Destructive remove_line_items_from_order Remove line items from an order Destructive remove_translations Remove translations from a resource Destructive request_customer_data_erasure Submit a customer data erasure request (GDPR right to be forgotten) Destructive revoke_customer_payment_method Revoke a customer
EXECUTE 4 tools
Execute cancel_bulk_operation Cancel a running bulk operation. There may be a short delay from when cancellation starts until the operation Execute run_bulk_mutation Run a bulk mutation operation to import data asynchronously. Each line in the JSONL file is processed as a sep Execute run_report Run a report and get its results Execute run_shopifyql_query Execute a ShopifyQL query for custom analytics and reporting
WRITE 125 tools
Write activate_location Activate a location so that you can stock inventory at the location Write activate_subscription_contract Activate a subscription contract (must be active, paused, or failed status) Write add_line_items_to_order Add line items to an order Write add_products_to_collection Add products to a manual collection Write adjust_inventory Adjust inventory quantities Write apply_order_edit Apply an order edit to the order Write approve_return_request Approve a return request Write calculate_order_edit Calculate changes for an order edit without applying them Write cancel_customer_data_erasure Cancel a pending customer data erasure request (GDPR). Can only cancel requests that haven Write close_cash_tracking_session Close a cash tracking session Write close_fulfillment_order Close a fulfillment order as incomplete, indicating the fulfillment service cannot ship remaining items. Write close_order Close an open order. A closed order indicates no further work is required. Write close_return Close a return Write complete_checkout Convert an abandoned checkout to a draft order (for recovery) Write complete_draft_order Complete a draft order and convert it to an order Write create_app_proxy Create an app proxy for an app (requires app management permissions) Write create_cart_transform Create a new cart transform using a Shopify Function Write create_cash_tracking_session Create a new cash tracking session for a location Write create_channel Create a new sales channel (requires app installation) Write create_collection Create a new collection (manual or smart collection) Write create_company Create a new B2B company Write create_company_contact Create a new contact for a B2B company Write create_company_location Create a new location for a B2B company Write create_custom_fulfillment_service Create a new custom fulfillment service Write create_custom_pixel Create a new custom pixel Write create_customer Create a new customer in the Shopify store Write create_customer_address Create a new address for a customer Write create_delivery_customization Create a new delivery customization rule using a Shopify Function Write create_delivery_option_generator Create a new delivery option generator using a Shopify Function Write create_discount Create a basic discount code (percentage or fixed amount) Write create_discounts_allocator_function Create a discounts allocator function using a Shopify Function Write create_draft_order Create a new draft order Write create_file Create a file from a URL (after staged upload or external URL) Write create_fulfillment Create a fulfillment for a fulfillment order Write create_fulfillment_constraint_rule Create a new fulfillment constraint rule using a Shopify Function Write create_inventory_shipment Create a new inventory shipment Write create_inventory_transfer Create a new inventory transfer between locations Write create_location Create a new location Write create_market Create a new market Write create_marketing_engagement Create a marketing engagement for a marketing activity or channel. Tracks customer interactions like clicks, i Write create_marketing_event Create a new marketing event Write create_menu Create a new navigation menu Write create_metaobject Create a new metaobject Write create_metaobject_definition Create a new metaobject definition that establishes the structure for custom data objects Write create_order Create a new order programmatically. Useful for importing orders from external systems or creating wholesale o Write create_packing_slip_template Create a new packing slip template Write create_page Create a new online store page Write create_pixel Create a new pixel Write create_price_rule Create a new price rule for automatic discounts Write create_product Create a new product in the Shopify store Write create_resource_feedback Create a resource feedback Write create_return Create a new return from an order Write create_script_tag Create a new script tag Write create_staged_upload Create staged upload targets for file uploads. Use this for uploading large files, media files, or bulk import Write create_subscription_contract_atomic Create a complete subscription contract in a single operation Write create_theme Create a new theme Write create_validation Create a new cart/checkout validation rule using a Shopify Function Write create_webhook_subscription Create a webhook subscription. Supports HTTPS URLs, Google Pub/Sub topics (pubsub://project:topic), and AWS Ev Write credit_gift_card Add credit to a gift card. Creates a credit transaction that increases the gift card balance. Write credit_store_credit_account Add funds to a store credit account. Creates the account automatically if it doesn Write decline_return_request Decline a return request Write disable_gift_card Disable a gift card Write hold_fulfillment_order Apply a fulfillment hold on a fulfillment order. Use this to pause fulfillment due to inventory issues, custom Write mark_order_as_paid Mark an order as paid by recording a payment transaction for the outstanding amount. Useful for manual payment Write move_fulfillment_order Move a fulfillment order to a different location for fulfillment. Write open_fulfillment_order Mark a fulfillment order as open, ready for fulfillment. Write open_order Reopen a closed order Write pause_subscription_contract Pause a subscription contract Write publish_collection Publish a collection to sales channels Write publish_locale Publish a locale to make it available on the storefront Write publish_theme Publish a theme (make it the main theme) Write receive_inventory_shipment Receive items from an inventory shipment Write receive_inventory_transfer Receive items from an inventory transfer Write register_translation Create or update a translation for a resource Write reject_fulfillment_request Reject a fulfillment request for a fulfillment order Write request_customer_merge Merge one customer into another (combines order history, addresses, etc.) Write reschedule_fulfillment_order Reschedule a scheduled fulfillment order to a new date and time. Write send_gift_card_notification_to_customer Send a gift card notification email to the customer associated with the gift card Write send_gift_card_notification_to_recipient Send a gift card notification email to the specified recipient Write set_inventory Set on-hand inventory quantity Write set_payment_customization_activation Activate or deactivate multiple payment customizations Write set_subscription_contract_next_billing_date Set the next billing date for a subscription contract Write toggle_custom_pixel Enable or disable a custom pixel Write unpublish_collection Unpublish a collection from sales channels Write unpublish_locale Unpublish a locale Write update_app_proxy Update an app proxy configuration Write update_cart_transform Update an existing cart transform Write update_channel Update an existing sales channel Write update_checkout_branding_settings Update checkout branding settings Write update_collection Update an existing collection Write update_company Update an existing B2B company Write update_company_contact Update an existing company contact Write update_custom_fulfillment_service Update an existing custom fulfillment service Write update_custom_pixel Update an existing custom pixel Write update_customer Update an existing customer Write update_customer_address Update a customer Write update_delivery_customization Update an existing delivery customization rule Write update_delivery_option_generator Update an existing delivery option generator Write update_discount_code Update an existing discount code Write update_file Update file metadata (alt text) Write update_fulfillment_constraint_rule Update an existing fulfillment constraint rule Write update_gift_card Update an existing gift card Write update_legal_policy Update a legal policy Write update_location Update an existing location Write update_market Update an existing market Write update_marketing_event Update an existing marketing event Write update_menu Update an existing navigation menu. Requires passing the entire menu structure including all items and their I Write update_menu_item_children Update only the children of a specific menu item. This is useful for updating a submenu without needing to rec Write update_metaobject Update an existing metaobject Write update_metaobject_definition Update an existing metaobject definition Write update_order Update order attributes like email, shipping address, tags, and notes. For line item changes, use order editin Write update_packing_slip_template Update an existing packing slip template Write update_page Update an existing page Write update_payment_customization Update an existing payment customization Write update_payment_terms Update existing payment terms Write update_pixel Update an existing pixel Write update_price_rule Update an existing price rule Write update_privacy_settings Update privacy settings Write update_product Update an existing product Write update_script_tag Update an existing script tag Write update_subscription_contract_product Change a product or product price in a subscription contract Write update_theme Update an existing theme Write update_validation Update an existing validation rule Write update_webhook_subscription Update an existing webhook subscription. You can change the endpoint URL, filters, included fields, or metafie Write upsert_theme_file Create or update a theme file
READ 137 tools
Read accept_fulfillment_request Accept a fulfillment request for a fulfillment order Read deactivate_location Deactivate a location and moves inventory, pending orders, and transfers to a destination location Read fail_subscription_contract Mark a subscription contract as failed Read get_all_cart_transforms Fetch all cart transforms including inactive ones Read get_all_orders Fetch all orders with comprehensive data including archived and cancelled orders Read get_analytics_report Fetch analytics reports and metrics from Shopify Read get_app Fetch a specific installed app by ID Read get_app_proxy Fetch app proxy configuration for the store Read get_apps Fetch installed apps for the store Read get_assigned_fulfillment_orders Fetch fulfillment orders assigned to a fulfillment service Read get_audit_events Fetch audit events for the store (staff actions, app installations, etc.) Read get_bulk_operation Get details of a specific bulk operation by ID Read get_cart_transforms Fetch cart transforms configured for the store Read get_cash_tracking_session Fetch a specific cash tracking session by ID Read get_cash_tracking_sessions Fetch cash tracking sessions for POS Read get_channel Fetch a specific sales channel by ID Read get_channels Fetch sales channels for the store Read get_checkout Fetch a specific checkout by ID Read get_checkout_branding_settings Fetch checkout branding settings for the store Read get_checkouts Fetch abandoned or active checkouts from the store Read get_collection Fetch a specific collection by ID Read get_collection_listings Fetch collection listings from the Shopify store Read get_collections Fetch collections from the Shopify store Read get_companies Fetch B2B companies from the store Read get_company Fetch a specific B2B company by ID Read get_custom_fulfillment_services Fetch custom fulfillment services for the store Read get_custom_pixel Fetch a specific custom pixel by ID Read get_custom_pixels Fetch custom pixels configured for the store Read get_customer Fetch a specific customer by ID Read get_customer_data_erasure_requests Fetch customer data erasure (GDPR) requests Read get_customer_events Fetch customer events (page views, product views, searches, etc.) Read get_customer_merge_requests Fetch customer merge requests Read get_customer_payment_method Fetch a specific payment method by ID Read get_customer_payment_methods Fetch stored payment methods for a customer Read get_customers Fetch customers from the Shopify store with optional filtering Read get_delivery_carriers Fetch delivery carrier services Read get_delivery_customizations Fetch delivery customization rules for the store Read get_delivery_option_generators Fetch delivery option generator configurations Read get_delivery_profiles Fetch delivery profiles Read get_discount_code Fetch a specific discount code by ID Read get_discounts Fetch discount codes from the store Read get_discounts_allocator_functions Fetch discounts allocator functions for the store Read get_draft_order Fetch a specific draft order by ID Read get_draft_orders Fetch draft orders from the store Read get_file Fetch a specific file by ID Read get_files Fetch files uploaded to the store (images, videos, PDFs, etc.) Read get_fulfillment_constraint_rules Fetch fulfillment constraint rules for the store Read get_fulfillment_order Fetch a specific fulfillment order by ID Read get_fulfillment_services Fetch custom fulfillment services configured in the store Read get_gift_card Fetch a specific gift card by ID Read get_gift_card_transactions Fetch gift card transactions Read get_gift_cards Fetch gift cards from the store Read get_inventory Fetch inventory levels for products Read get_inventory_shipment Fetch a specific inventory shipment by ID Read get_inventory_shipments Fetch inventory shipments for the store Read get_inventory_shipments_received_items Fetch inventory items received in shipments Read get_inventory_transfer Fetch a specific inventory transfer by ID Read get_inventory_transfers Fetch inventory transfers between locations Read get_legal_policies Fetch legal policies for the store Read get_legal_policy Fetch a specific legal policy by handle Read get_locales Fetch available locales for the store Read get_location Fetch a specific location by ID Read get_locations Fetch store locations Read get_market Fetch a specific market by ID Read get_marketing_event Fetch a specific marketing event by ID Read get_marketing_events Fetch marketing events for the store Read get_marketing_integrated_campaigns Fetch marketing integrated campaigns Read get_markets Fetch markets configured for the store Read get_markets_home Fetch markets home data and analytics Read get_menu Fetch a specific menu by ID Read get_menu_item Fetch a specific menu item by ID from a menu Read get_menus Fetch navigation menus for the online store Read get_metaobject_definitions Fetch metaobject definitions Read get_metaobjects Fetch metaobjects of a specific type Read get_order Fetch a specific order by ID Read get_order_edit Fetch an order edit by ID Read get_orders Fetch orders from the Shopify store with optional filtering Read get_packing_slip_templates Fetch packing slip templates Read get_page Fetch a specific page by ID Read get_pages Fetch online store pages Read get_payment_customization Fetch a specific payment customization by ID Read get_payment_customizations Fetch payment customizations from the store Read get_payment_mandates Fetch payment mandates for the store Read get_payment_terms Fetch payment terms configurations Read get_pixel Fetch a specific pixel by ID Read get_pixels Fetch pixels from the Shopify store Read get_price_rule Fetch a specific price rule by ID Read get_price_rules Fetch price rules for automatic discounts Read get_privacy_settings Fetch privacy settings from the Shopify store Read get_product Fetch a specific product by ID Read get_product_listing Fetch a specific product listing by ID Read get_product_listings Fetch product listings from the Shopify store Read get_product_recommendations Get product recommendations based on a product Read get_products Fetch products from the Shopify store with optional filtering Read get_publication Fetch a specific publication by ID Read get_publication_collections Fetch collections published to a publication Read get_publication_products Fetch products published to a publication Read get_publications Fetch publications from the Shopify store Read get_report Fetch a specific report by ID Read get_reports Fetch reports from the Shopify store Read get_resource_feedbacks Fetch resource feedbacks from the Shopify store Read get_return Fetch a specific return by ID Read get_returnable_fulfillments Fetch fulfillments that can be returned for an order Read get_returns_by_order Fetch returns for a specific order Read get_script_tag Fetch a specific script tag by ID Read get_script_tags Fetch script tags from the Shopify store Read get_shipping_countries Fetch available shipping countries Read get_shipping_zones Fetch shipping zones from the Shopify store Read get_shop_info Fetch general shop information Read get_shop_policies Fetch shop policies (refund, privacy, terms of service, etc.) Read get_shopify_payments_account Fetch Shopify Payments account information including balances and configuration Read get_shopify_payments_balance_transactions Fetch Shopify Payments balance transactions Read get_shopify_payments_bank_accounts Fetch bank accounts configured for Shopify Payments Read get_shopify_payments_disputes Fetch Shopify Payments disputes Read get_shopify_payments_payouts Fetch Shopify Payments payouts Read get_store_credit_account Fetch a store credit account by ID Read get_store_credit_accounts_by_owner Fetch all store credit accounts for a customer or company location Read get_subscription_contract Fetch a specific subscription contract by ID Read get_subscription_contracts Fetch subscription contracts from the store Read get_theme Fetch a specific theme by ID Read get_theme_file Fetch a specific file from a theme Read get_theme_files Fetch files from a theme Read get_themes Fetch themes from the Shopify store Read get_translatable_resources Fetch translatable resources from the store Read get_translations Fetch translations for a locale Read get_translations_for_resource Get translations for a specific resource Read get_validations Fetch cart and checkout validation rules Read get_visitor_privacy_consent Get visitor privacy consent status Read get_webhook_subscription Get a specific webhook subscription by ID Read health_check Check if the Shopify GraphQL MCP server is running and configured Read list_bulk_operations List all bulk operations for the app. Results include status, type, and URLs to result files when complete. Read list_webhook_subscriptions List all webhook subscriptions for the current app and shop. Returns only shop-scoped subscriptions, not app-s Read predictive_search Get predictive search results (autocomplete) Read release_fulfillment_hold Release the fulfillment hold on a fulfillment order, allowing it to be fulfilled. Read run_bulk_query Run a bulk query operation to fetch large amounts of data asynchronously. Results are returned as a JSONL file Read search_products Search products using Shopify Read shopifyql_query Execute a ShopifyQL query for analytics (requires read_analytics scope)
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
paymentsadminautomation
Binance MCP Server 734 tools
paymentsadminautomation
GoHighLevel MCP Server 566 tools
paymentsadminautomation
GoCreative Agent API 546 tools
paymentsadminautomation
Claude Flow 454 tools
paymentsadminautomation
ServiceTitan MCP Server 454 tools
paymentsadminautomation
CloudStack MCP Server 442 tools
paymentsadminautomation
Integrations MCP 420 tools
paymentsadminautomation
FAQ

Questions about Shopify Graphql

Can an AI agent move money through the Shopify Graphql MCP server? +

Yes. The Shopify Graphql server exposes 10 financial tools including add_cash_transaction, capture_order_payment, create_gift_card. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Shopify Graphql MCP server? +

Yes. The Shopify Graphql server exposes 43 destructive tools including cancel_fulfillment_order, cancel_order, cancel_subscription_contract. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Shopify Graphql? +

The Shopify Graphql server has 125 write tools including activate_location, activate_subscription_contract, add_line_items_to_order. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Shopify Graphql.

How many tools does the Shopify Graphql MCP server expose? +

319 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 137 are read-only. 182 can modify, create, or delete data.

How do I enforce a policy on Shopify Graphql? +

Register the Shopify Graphql MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Shopify Graphql tool call.

Deterministic rules across all 319 Shopify Graphql tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SHOPIFY GRAPHQL →

Instant setup, no code required.

319 Shopify Graphql tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.