Skip to main content
MCP servers for e-commerce platform operations, giving an agent tools to work directly against Shopify, Gorgias, Recharge, and related platforms.

​
Available servers

​
Shopify

The narrow servers exist so you can grant an agent exactly one job. If an agent only needs to release fulfillment holds, give it shopify rather than shopify-full — 3 tools instead of 41, and no path to issuing a refund.

​
shopify-full coverage

Orders — search_orders with status, financial, fulfillment and date filters; get_order with line items, customer and transactions; update_order; cancel_order with reason, refund option and restock; close_order / reopen_order. Fulfillment — get_fulfillment_orders, create_fulfillment with tracking, update_tracking, cancel_fulfillment, release_fulfillment_hold. Refunds — calculate_refund to preview amounts, create_refund, get_refunds. Products — search_products, get_product with variants and images, update_product, update_variant. Plus customers, inventory, discounts, metafields, collections, gift cards, and draft orders.
create_refund, cancel_order, and create_fulfillment take real action on a live store. calculate_refund and preview_refund exist precisely so an agent can check its arithmetic before committing — have it preview first.

​
Other platforms

Twenty servers ship in total, 254 tools between them. The same rule applies throughout: give an agent the narrow server when a narrow server exists. Support Returns Subscriptions and payments Fulfillment and shipping Marketing and reviews

​
Setup

Then register the server you want with your MCP host, supplying that platform’s credentials via environment variables. Each server’s README documents its required variables.
Registering the narrow shopify server rather than shopify-full is the whole security decision: the agent gets three tools instead of forty, and no path to issuing a refund.

​
Choosing a scope

These servers hold live store credentials and act on a real merchant’s data. Scope the token you give them at the platform — a Shopify token with write_orders and nothing else cannot be talked into editing products, whatever the agent decides to try. For anything that must not happen on the model’s judgement alone, put an Agent Gate in front of the server so each call needs a proof before it runs.

​
Next steps

Agent Gate

Requiring an authorization proof before a tool call runs.

Sandbox architecture

Where these servers sit.

Security guide

Isolation and credential handling.

All MCP servers

The wider set StateSet publishes.
Last modified on August 29, 2026