shopify-operations-mcp MCP Server

Safe-write Shopify operations: plan-before-execute writes with out-of-band approval and audit.

Publisher claimed. No tool list reported, and Pod has not connected to this server.

Status

Pod has not dialled shopify-operations-mcp yet, so everything on this page is what its publisher reported rather than what we observed. Registries describe servers; they do not connect to them. Until a check runs, treat the tool list below as a claim.

Connect

Published as shopify-operations-mcp on npm. Runs locally.

Known issues

27 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded — those are release checklists and internal refactors, not things that will go wrong for you. Showing 12.

Most discussed

DECISIONS.md + AGENTS.md + docs/agents

Part of #1

Goal: Decision record + agent conventions, consistent with sw-postgres-mcp.

Scope: DECISIONS.md entries: preview-as-computed-diff (no transactions on Shopify); snapshot rollback scope (reversible ops only); always-approval for irreversible ops; hash-chained audit vs Postgres grants; GraphQL over REST; partial-failure ledger. AGENTS.md pointer + docs/agents/{issue-tracker,triage-labels,domain}.md adapted from sw-postgres-mcp.

Done-when: Docs consistent with the code and

Read the thread · 2026-08-13 · closed · 2 comments

Deterministic dev-store seeder

Part of #1

Goal: A realistic store to point the server at — deterministic, like sw-postgres-mcp's seeder.

Scope: scripts/seed-store.ts; seeded PRNG (mulberry32, --seed flag); ~300 products x 1-4 variants across vendors/tags, 2 locations with stock, ~20 customers, ~120 Bogus-Gateway orders in mixed states (paid/unfulfilled, fulfilled, discounted); deliberately sized so a store-wide reprice trips hardMaxItems and a single-tag reprice trips approvalRequiredAboveItems; idempotent re-run (r

Read the thread · 2026-08-13 · closed · 2 comments

GraphQL Admin client (throttle, backoff, pagination, chunking)

Part of #1

Goal: One client all tools and tests go through.

Scope: Plain fetch against /admin/api//graphql.json (pinned quarterly version); cost-aware throttling driven by extensions.cost.throttleStatus; jittered backoff with max retries on THROTTLED / 429 / 5xx; cursor pagination helper for connections; mutation chunking helper (conservative batch size); structured errors SHOPIFY_THROTTLED / SHOPIFY_API_ERROR with hint; injectable fetch for tests.

Done-when: Unit tests w

Read the thread · 2026-08-13 · closed · 2 comments

demo:prep fails: seeder is broken against Admin API 2026-04

Problem

npm run demo:prep fails at the seed step: the seed-store script uses mutation signatures from an older Admin API version and errors against 2026-04.

Root causes

productDelete(productId:) -> now requires input: { id }
customerCreate(customer:) -> now takes input: with CustomerInput!
ProductVariantsBulkInput: sku/inventoryManagement moved under inventoryItem: { sku, tracked }
New product model: productVariantsBulkCreate redefines the option set (delet

Read the thread · 2026-08-16 · closed · 1 comment

Address unaddressed review concerns from PR #49

Follow-up from PR #49 (merged 2026-08-16) — CodeRabbit posted 6 actionable comments with CHANGES_REQUESTED, but the PR was merged without addressing them. All 6 are still valid against main (6203a4c).

Concerns

scripts/demo-baseline.mjs — the failure block checks count/variants/saleVariants/protectedProducts but not data.first === 50, even though the script's own docstring declares first: 50 an invariant. A page-size regression can pass while the cursor walk still

Read the thread · 2026-08-16 · closed · 1 comment

Most recent

npm publish + MCP Registry publish (manual)

Part of #1

Goal: Public installability + registry listing.

Scope: npm run build && npm publish (bin entry); mcp-publisher login github; mcp-publisher publish; verify the listing resolves.

Done-when: npm view shopify-operations-mcp shows the version; registry lists io.github.jpka/shopify-operations-mcp.

Human task: npm 2FA + device-flow login.

Read the thread · 2026-08-13 · closed · 0 comments

server.json + mcpName + sync test

Part of #1

Goal: MCP Registry readiness, same as sw-postgres-mcp.

Scope: server.json per the 2025-12-11 schema as io.github.jpka/shopify-operations-mcp; environmentVariables: SHOPIFY_STORE_DOMAIN (required, not secret), SHOPIFY_ADMIN_TOKEN (required, secret); tests/serverJson.test.ts keeps server.json in sync with package.json (mcpName).

Done-when: Sync test green.