Shopify Admin API MCP Server — products, orders, customers, inventory, fulfillment, webhooks
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"shopify-blade-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# shopify-blade-mcp Shopify Admin API MCP server for Claude and other LLM agents. Token-efficient, security-first, Sidereal-native. 44 tools covering products, orders, customers, inventory, collections, fulfillment, discounts, metafields, webhooks, and analytics — all via GraphQL Admin API. ## Why another Shopify MCP? Shopify has three official MCPs (Storefront, Customer Accounts, Dev MCP) but **none expose the Admin API** — the API merchants actually use to manage their stores. Community MCPs fill the gap but lack security fundamentals: - **SecOps** -- Write gating, confirm gate for destructive operations (delete product, cancel order), credential scrubbing in all error paths. No community MCP gates writes at the operation level - **Token efficiency** -- Pipe-delimited lists, cursor-based pagination hints, human-readable money, null-field omission — not raw GraphQL JSON dumps that burn 10-50x more tokens - **Sidereal ecosystem** -- `ecommerce-v1` contract with 40 operations across 4 tiers, plugin manifest, webhook HMAC verification for future dispatch integration ## Comparison | Capability | shopify-blade-mcp | @anthropic/shopify-dev-mcp | cob-shopify-mcp | Shopify Storefront MCP | |---|---|---|---|---| | API surface | Admin GraphQL (full) | Dev tooling only | Admin REST (59 tools) | Storefront only (buyer) | | Token-efficient responses | Pipe-delimited, null omission | N/A (dev tools) | Raw JSON | Raw JSON | | Write gating | Per-op env var gate | N/A | None -- all writes open | Read-only | | Destructive op confirmation | `confirm=true` required | N/A | None | N/A | | Credential scrubbing | `shpat_*`, `shpss_*`, Bearer | Unknown | None | None | | GraphQL (post-REST deprecation) | Yes (native) | N/A | No (REST, deprecated Oct 2024) | Yes | | Webhook HMAC verification | Built-in tool | No | No | No | | Cost tracking | Per-query cost in responses | N/A | No | No | | GID normalisation | Auto (numeric, string, or full GID) | N/A | Manual | N/A | | Analytics (Sho…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.