"Shopify" matching MCP servers:

An MCP server boilerplate for Shopify apps that handles OAuth authentication, allowing merchants to log in through Shopify instead of copy-pasting a token.

Safe-write Shopify operations MCP server with plan-before-execute writes, out-of-band approval, and tamper-evident audit trail.

Security-focused MCP server for Shopify Admin GraphQL with read-only queries by default and mutations requiring preview and one-time confirmation. It manages short-lived tokens internally and enforces strict scope and approval controls.

Enables agents to authenticate and route webhooks from Shopify, Stripe, GitHub, Slack, and PayPal using HMAC-SHA256 constant-time verification and timestamp replay-window validation. It then multiplexes verified events into agent workflows without external runtime dependencies.

An MCP server that authenticates incoming webhooks from multiple providers such as Shopify, Stripe, GitHub, Slack, and PayPal using HMAC-SHA256 constant-time verification and timestamp replay-window validation. It lets agents validate and multiplex verified webhook events into dispatched event streams.