STACK CHECK DOCS PRICING GET STARTED

// MCP SERVER RECORD

Shopify MCP Server

Unverified

REPOtzenderman/shopify-mcp

FRisk gradecritical blast radius

Catalogue entry updated 6 days ago

Auth postureNot probedno remote endpoint probed yet

Tools352 Destructive · 17 Write · 16 Read

Worst categoryDestructivegrade tracks the peak, not the average

Capability mix

Destructive 2Write 17Read 16

What it can reach

Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money

Tools 35

delete-menuDestructiveHigh delete-product-imageDestructiveHigh add-products-to-collectionWriteMedium create-collectionWriteMedium create-customerWriteMedium

View all 35 tools

create-draft-orderWriteHigh create-menuWriteMedium create-productWriteHigh create-product-imageWriteMedium create-product-variantWriteHigh remove-products-from-collectionWriteMedium update-collectionWriteMedium update-customerWriteHigh update-draft-orderWriteHigh update-menuWriteMedium update-orderWriteHigh update-productWriteHigh update-product-imageWriteMedium update-product-variantWriteHigh get-collection-by-idReadLow get-collectionsReadLow get-customer-by-idReadLow get-customer-ordersReadMedium get-customersReadMedium get-draft-order-by-idReadLow get-draft-ordersReadLow get-job-statusReadLow get-menuReadLow get-menusReadLow get-order-by-idReadLow get-ordersReadLow get-product-by-idReadLow get-productsReadLow get-variants-by-skusReadLow list-storesReadLow

Change history

No changes recorded since first scan. Watched servers surface a diff within the hour.

Recommended policy

delete-menudeny

add-products-to-collectionrate limit

Read-only toolsallow

Full policy breakdown with enforcement rules →

// LOOK UP ANOTHER SERVER

Every MCP server has a record like this.

Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.

Teams ship this data inside their own products. See what a licence covers →