PuppyIP Resource Center
Cross-Border Ecommerce Development 8 min Published 2026-10-20

Shop MCP is live: buyers still confirm before an agent pays

Shopify announced Shop MCP as live on October 13, 2026. An MCP-compatible shopping agent can search products, create a cart, and open a merchant checkout through one connection. Start with the exact https://mcp.shop.com/ endpoint and a client that supports the required protocol; before a payment, the agent must show the merchant, items, current total, and payment method and get the shopper's confirmation.

Shopify Shop MCP MCP Shopping agents

Service eligibility and regional restrictions

PuppyIP serves only compliant overseas businesses and their authorized personnel. Proxy services are not available in mainland China. The service may only be used for lawful business activities outside mainland China. Use of this service within mainland China is prohibited.

Hosting a proxy IP or server overseas does not change these restrictions. The service must not be provided to end users in mainland China through relaying, forwarding, sharing or resale. Before use, read the Terms of Service.

Key Takeaways

  • Shop MCP is live, while existing Shopify Catalog API integrations can continue unchanged.
  • The server is at https://mcp.shop.com/ with no /mcp path; clients that only support the older initialize handshake cannot connect.
  • Product search needs no API key. Shopify mentions keys for higher search limits but has not published the exact limits or fees.
  • A cart or checkout belongs to one store. Creating checkout does not place an order; the shopper must confirm the order and payment method before complete_checkout.

What does Shop MCP add?

Shopify announced Shop MCP as live on October 13, 2026. One connection lets an agent search the Shopify Catalog, read product details, create a cart, open a store checkout, and place an order after the shopper confirms payment.

It is another entry point alongside the existing Catalog API, which Shopify says does not require changes. It is also different from Shopify Checkout WebMCP: that guide covers an agent acting in the buyer's current checkout tab, while this article covers agents connected to Shop MCP's remote server.

Why must you leave /mcp off the URL?

Shop MCP is served from the root at https://mcp.shop.com/. The official guide says the server has no /mcp path and returns 404 there. Add the root URL to a compatible client, then load https://mcp.shop.com/skill.md so the agent can follow the tool boundaries.

The server uses MCP 2026-07-28 and the server/discover handshake. A client that only knows the older initialize handshake cannot connect, even if it advertises MCP support; the documented alternative is the CLI or HTTP. Claude, ChatGPT, Claude Code, and other remote HTTP MCP clients each have their own setup steps.

How do search, checkout, and account access differ?

Product search works while signed out and does not require an API key. Shopify says a key can provide higher search limits, but its public announcement does not state the numbers, pricing, or country-by-country availability. No-key search should not be read as unlimited search or free transactions.

Cart and checkout tools can also work without sign-in; a signed-in Shop shopper may use saved addresses and Shop Pay when the merchant offers them. Account lookup, order search, and the five approval tools require a shopper-authorized token. Shopify says to send that token only in the Authorization header to https://mcp.shop.com/, never in a URL, tool argument, or log.

When may an agent create or pay for a checkout?

Each cart and checkout belongs to one merchant, so products from three stores require separate checkouts. Shopify recommends creating a cart or checkout only when the shopper asks for one; interest in a product by itself is not a request.

Creating checkout does not place an order. Only when status is ready_for_complete should the agent show the merchant, items and quantities, current total, and available payment methods, let the shopper choose and confirm, then call complete_checkout once. Do not pick a default payment method for them. If the shopper needs to provide information or review the purchase on the merchant's site, hand off the continue_url.

How do you check an order without webhooks?

Shopify's launch announcement says Shop MCP had no webhooks, so an integration needs to poll get_checkout for checkout status. Show an order as placed only when the response has status: completed and includes order; while it is complete_in_progress, read the status again instead of submitting another payment.

The checkout ID and continue_url contain a key that can access the checkout. Keep them out of logs and analytics, and share continue_url only with the shopper. For a 404, check that you did not add /mcp; for rate limits, wait for the returned retry_after value. When a write has an uncertain result, read the current checkout before deciding whether to retry.

What is live, and what remains unspecified?

Shopify has announced Shop MCP as live for developers building or configuring MCP-compatible agents and tools. Existing Catalog API users do not need to migrate; the merchant's checkout response still determines purchase, delivery, tax, and payment options.

The linked public announcement does not list the higher search-limit numbers, full pricing, or a country-by-country coverage list. Before integrating, check the target client's protocol support, the tools it discovers, and the checkout details returned by each merchant. MCP compatibility alone does not prove that every client, account, or store is eligible.

Sources

Frequently Asked Questions

Can I connect Shop MCP to ChatGPT or Claude?

Shopify's connection guide includes setup steps for ChatGPT, Claude, and Claude Code, and allows other clients that support remote HTTP MCP 2026-07-28. An account or organization may need to enable the connection first; clients limited to the older initialize handshake are incompatible.

Does Shop MCP search need an API key or payment?

Shopify says product search needs no API key and mentions creating a key for higher search limits, but it has not published exact limits or fees. No-key access does not mean unlimited search or free products, checkout, or payment.

Can an agent create a cart before the shopper signs in?

Yes. Shopify says cart and checkout tools work without sign-in. A signed-in shopper may use saved addresses and Shop Pay; account, order, and approval tools require an authorized token.

Can an agent place the order without the shopper's confirmation?

It should not. Shopify requires the agent to show the merchant, items, current total, and payment choices, then let the shopper choose and confirm before calling complete_checkout. Hand off continue_url when the shopper must provide information or review the checkout on the store.

Does Shop MCP have an order webhook?

Shopify's launch announcement said there was no webhook at launch, so integrations need to poll get_checkout. A completed status with an order is the documented confirmation.

Should I add /mcp to the Shop MCP address?

No. Shop MCP uses the root address https://mcp.shop.com/; the official guide says the /mcp path returns 404. The client also needs the MCP 2026-07-28 server/discover handshake.