Shopify Admin GraphQL Gateway MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SHOPIFY_CLIENT_ID | Yes | Server-side Shopify app client ID. | |
| SHOPIFY_MAX_PAGES | No | Maximum pages in one tool call, capped at 100. | 10 |
| SHOPIFY_API_VERSION | No | Fixed quarterly Admin API version. Must use YYYY-01, YYYY-04, YYYY-07, or YYYY-10. | 2026-07 |
| SHOPIFY_STORE_DOMAIN | Yes | Accepts your-store or your-store.myshopify.com; schemes, paths, ports, and other domains are rejected. | |
| SHOPIFY_CLIENT_SECRET | Yes | Server-side Shopify app secret. Never expose it to LibreChat's model or Code Interpreter. | |
| SHOPIFY_MAX_PAGE_SIZE | No | Maximum first or last, capped at 250. | 100 |
| SHOPIFY_ALLOWED_SCOPES | Yes | Comma-separated exact scope allowlist. | |
| SHOPIFY_ENABLE_MUTATIONS | No | Mutation execution kill switch. Preview remains available. | false |
| SHOPIFY_LIBRECHAT_USER_ID | No | Trusted authenticated user identity. Required for mutation preview/execution. | |
| SHOPIFY_LIBRECHAT_AGENT_ID | No | Trusted active-agent identity. Required for mutation preview/execution and recorded in audits. | |
| SHOPIFY_REQUEST_TIMEOUT_MS | No | Overall request/pagination deadline, from 1–120 seconds. | 30000 |
| SHOPIFY_CONFIRMATION_TTL_SECONDS | No | Mutation confirmation lifetime, from 30–900 seconds. | 300 |
| SHOPIFY_TOKEN_REFRESH_BUFFER_SECONDS | No | Refresh before token expiry. | 300 |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| shopify_admin_graphql_queryA | Executes one read-only Shopify Admin GraphQL query against the configured store. The store and API version cannot be overridden. Optional bounded cursor pagination requires explicit connection metadata. |
| shopify_admin_graphql_preview_mutationA | Validates but does not execute exactly one Shopify mutation. Returns the variables, estimated scopes, affected resource IDs, change summary, and a short-lived user-bound confirmation token. |
| shopify_admin_graphql_execute_mutationA | Executes a previously previewed mutation using its one-time confirmation token. Disabled unless SHOPIFY_ENABLE_MUTATIONS=true. |
| shopify_admin_product_countsA | Uses productsCount—not paginated products—to return total, active, draft, archived, and unlisted product counts. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/samson10504/shopify-admin-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server