Shopify Shop MCP: What Store Owners Should Check

Shopify launched Shop MCP on October 13, 2026. It is one hosted MCP server, at mcp.shop.com, that lets any MCP-compatible AI agent search more than 1 billion products in Shopify Catalog, build a cart at the store that sells an item, and, for a shopper signed in with Shop, finish the purchase with Shop Pay after the shopper confirms the total and the payment method. Search needs no API key.

If you run a Shopify store, this is a new way your products can be found and bought without a person visiting your site first. If you are building an agent that buys things, for your own team or for customers, it is a ready-made checkout with rules you need to follow.

We read Shopify's changelog post, the Shop MCP docs, the carts and checkout guide, the approvals guide, and the Help Center pages on Shopify Catalog, its requirements and agentic storefronts on October 17, 2026. Everything about Shopify below comes from those pages. We have not placed a test order through Shop MCP for this post.

Store owners: there is nothing to install. Check that your products meet the Shopify Catalog rules and that the product data is complete, because agents read that data, not your theme. Builders: Shop MCP gives an agent search, carts and checkout in one connection, but the purchase step has hard rules. The shopper must confirm, there are no webhooks yet, and an unclear result must never be retried blindly.

Shopify lists 17 tools. They fall into a few groups:

• Search and product details: search_catalog, lookup_catalog and get_product read from Shopify Catalog. Search works with words, a similar product or a photo.
• Carts and checkout: an agent creates a cart or a checkout with the merchant that sells the item. Each checkout belongs to one merchant, so items from three stores take three checkouts. These work without sign-in.
• Sign-in with Shop: a signed-in shopper's saved addresses and Shop Pay can be used, and search can use their saved preferences.
• Orders: for a signed-in shopper, search_orders finds orders and tracking.
• Approvals: for a store that does not run on Shopify, the shopper approves the store, the purchase, a saved card and a spending limit inside Shop, and Shop then gives the agent card details for that one purchase.

Shopify's changelog says orders placed through an agent appear in the merchant's Shopify admin like any other order.

Shop MCP searches Shopify Catalog. According to the Help Center, eligible products are included in the Catalog automatically, and a store cannot opt out of the Catalog itself. You can stop individual AI channels in the agentic storefronts settings (Sales channels, then Agentic, in your admin) from reading your products through the Catalog. The docs we read do not say whether those per-channel switches apply to agents that connect through Shop MCP, so we would not assume they do.

To be in the Catalog, Shopify's requirements include:

1. 1A Starter plan or higher, and a store that is not password protected.
2. 2Products with a title, at least one image, and a price above zero.
3. 3Products published to the online store, Hydrogen or a headless channel, with an identifiable product URL, and not unlisted or hidden from search engines.
4. 4A product category Shopify allows. Alcohol, tobacco, event tickets, services and product add-ons, live animals and several other categories are excluded. So are products Shopify classifies as uncategorized.

Shopify also says being in the Catalog does not guarantee a product shows up in any particular AI answer, and that each channel controls the ranking and wording. What you control is the data. Clear titles, full descriptions, correct variants and options, accurate prices and live inventory are what an agent has to work with. If your titles or descriptions live in metafields, Shopify's Catalog Mapping tool lets you point the Catalog at the right fields without changing your store.

The checkout guide is strict, and the rules are worth copying into any buying agent:

• Create a cart or checkout only when the shopper asks. Interest in a product does not count.
• Before completing, show the merchant, items, quantities, current total and offered payment methods, and have the shopper choose. Never pick a default payment method.
• Call complete_checkout once, and only when the status is ready_for_complete.
• Only a result with status completed and an order confirms the purchase.
• If the outcome is unclear, do not send complete_checkout again, even with the same key, and do not start a new checkout. Read the checkout with get_checkout. If it does not show completed, tell the shopper and hand them the merchant's checkout link.
• Some checkouts need the shopper to finish a step on the merchant's own page. The status says so, and the continue_url link is the only way forward.
• Checkouts expire 6 hours after creation by default.
• The checkout ID and continue_url carry a key that gives access to the checkout. Keep them out of logs and analytics.
• There are no webhooks at launch, so you have to poll get_checkout for status. Our post on webhooks vs polling covers how to poll without hammering an API.
• Create and update calls accept an idempotency key. Use one, as in our guide to webhook idempotency for AI agents.

These are designs we would build. None of them describes a client result.

1. 1Catalog readiness check for a store. A scheduled job pulls products through the Shopify Admin API and flags the ones that would fail the Catalog rules: no image, zero price, not published, or in a category Shopify excludes. It also flags thin titles and empty descriptions. The output is a short weekly list for the person who manages products. It needs plain workflow automation and no AI.
2. 2A supplies buyer with a person in the loop. For a business that reorders the same items from Shopify stores, an agent builds the cart and checkout, then sends the total and payment options to a named person for approval. Only after that reply does it complete. It records the order in your purchasing sheet and polls for status. Caps on amount and vendor list sit in front of it, the same idea as Mercury's approval step in our Mercury MCP post.
3. 3Order intake that does not care where an order came from. Since agent orders appear in the admin like any other order, your fulfillment and support flows should already handle them. We would check that tagging, inventory sync and customer emails work the same for an order that never touched your storefront.

If most of your products fall in Shopify's excluded categories, or you sell services and add-ons, the Catalog will not carry them. If your store is B2B only or password protected, it is not eligible. If you are not on Shopify, the approvals path lets a shopper's agent pay at your checkout, but your products are not in Shopify Catalog, so agents will not find you through Shop MCP search. And if you are thinking of building your own shopping agent on Shop MCP, ask first whether your customers actually shop through AI tools. Shopify's docs do not give numbers on that, and neither do we.

OrchestriAI is not a Shopify partner and does not sell Shopify plans. We connect stores to the rest of a business. Our Shopify integration page covers orders, inventory and fulfillment flows. Systems integration links store data to accounting, CRM and support tools. MCP development and AI agent systems cover agents that buy or sell with clear approval steps. For background on the protocol itself, see what MCP servers are. If you want to know which store tasks are worth automating first, start with the free automation audit.

OrchestriAI is an independent implementation provider. Product names are used for identification only. OrchestriAI is not affiliated with, endorsed by, or sponsored by Shopify, Anthropic or OpenAI. This article summarizes Shopify's public documentation as of October 17, 2026. Tools, eligibility rules and settings can change, so confirm them in Shopify's current docs. This is not legal or financial advice.