← Back to search

io.github.den-indance/shopify-mcp-pro

den-indance Scanned 1d ago

Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.

C
64 / 100

Versions

2.0.4latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 52

listPages
annotations: none low

List store pages

limit number cursor string
listProducts
annotations: none low

List products from the Shopify store

limit number query string cursor string reverse boolean
getProduct
annotations: none low

Get a specific product by ID

id string
getCustomerAnalytics
annotations: none low

Get customer behavior analytics

endDate string startDate string
createProduct
annotations: none low

Create a new product

sku string price string title string vendor string description string productType string inventoryQuantity number
updateProduct
annotations: none low

Update an existing product

id string title string vendor string description string productType string
listOrders
annotations: none low

List orders from the Shopify store

limit number query string cursor string
getOrder
annotations: none low

Get a specific order by ID

id string
listCustomers
annotations: none low

List customers from the Shopify store

limit number query string cursor string reverse boolean
getCustomer
annotations: none low

Get a specific customer by ID

id string
getInventoryLevels
annotations: none low

Get inventory levels for a product variant

inventoryItemId string
adjustInventory
annotations: none low

Adjust inventory quantity

quantity number locationId string inventoryItemId string
setMetafield
annotations: none low

Set a metafield on a resource

key string type string value string ownerId string namespace string
listCollections
annotations: none low

List collections from the Shopify store

limit number query string cursor string
listLocations
annotations: none low

List all store locations

limit number query string cursor string savedSearchId string
getShopInfo
annotations: none low

Get shop information and analytics

limit number query string cursor string savedSearchId string
listDiscounts
annotations: none low

List discount codes and automatic discounts

limit number query string cursor string savedSearchId string
createDiscountCode
annotations: none low

Create a discount code

code string title string amount string endsAt string quantity number startsAt string subtotal string percentage number usageLimit number appliesOncePerCustomer boolean
listFulfillmentOrders
annotations: none low

List fulfillment orders

limit number cursor string assignedLocationId string
createFulfillment
annotations: none low

Create a fulfillment for an order

id string url string number string company string orderId string quantity number locationId string notifyCustomer boolean
getShippingZones
annotations: none low

Get shipping zones and rates

limit number
listTransactions
annotations: none low

List transactions for an order

orderId string
createRefund
annotations: none low

Create a refund for an order

note string amount string notify boolean orderId string quantity number fullRefund boolean lineItemId string refundDuties boolean
listGiftCards
annotations: none low

List gift cards

limit number query string cursor string
createGiftCard
annotations: none low

Create a gift card

code string note string expiresOn string initialValue string recipientEmail string recipientMessage string
createPage
annotations: none low

Create a new page

key string type string title string value string handle string content string namespace string published boolean
listBlogs
annotations: none low

List blogs

limit number cursor string
createArticle
annotations: none low

Create a blog article

url string title string blogId string altText string content string summary string published boolean publishedAt string
createRedirect
annotations: none low

Create a URL redirect

path string target string
listThemes
annotations: none low

List installed themes

limit number cursor string
listWebhooks
annotations: none low

List configured webhooks

limit number cursor string
createWebhook
annotations: none low

Create a webhook subscription

topic string callbackUrl string
listDraftOrders
annotations: none low

List draft orders

limit number query string cursor string
createDraftOrder
annotations: none low

Create a draft order

key string zip string city string note string email string value string address1 string address2 string quantity number productId string variantId string customerId string countryCode string provinceCode string
listMetaobjectDefinitions
annotations: none low

List all metaobject type definitions configured in the store. Use this to discover valid `type` values (e.g. `shopify--color-pattern`, `product.material`) before calling listMetaobjects. Returns id/type/name/description + field schema per definition.

limit number cursor string
listMetaobjects
annotations: none low

List metaobjects of a given type. The `type` arg must match a definition exactly (case-sensitive identifier like `shopify--color-pattern`). Run listMetaobjectDefinitions first to discover what types exist in this store. Non-existent type → empty result, not error.

type string limit number cursor string
createMetaobject
annotations: none low

Create a metaobject

key string type string value string
listMarkets
annotations: none low

List configured markets

limit number
listPriceRules
annotations: none low

List discounts (covers code, automatic, BxGy, free-shipping). Replaces deprecated priceRules query with discountNodes in 2026-04+.

limit number cursor string
listAbandonedCheckouts
annotations: none low

List abandoned checkouts

limit number query string cursor string
runShopifyQL
annotations: none low

Run an arbitrary ShopifyQL analytics query against the store. Same data as Admin → Analytics. Canonical clause order: FROM → SHOW → WHERE → SINCE/UNTIL/DURING → GROUP BY → ORDER BY → LIMIT. Dates are BARE (no quotes): `SINCE 2026-01-01 UNTIL today` or relative `SINCE -30d UNTIL today`. Use `GROUP BY` (full keyword), not `BY`. Dimensions in SHOW must also appear in GROUP BY. Verified datasets: `sales` (metrics: total_sales, gross_sales, net_sales, orders, average_order_value; dims: product_title, billing_country, customer_type), `sessions` (metrics: sessions, online_store_visitors, conversion_rate; dims: referrer_source, utm_source, utm_medium, referrer_host). Note: `orders` and `products` are NOT valid ShopifyQL datasets — use GraphQL tools instead. Returns { parseErrors: [String], tableData: { columns: [{name,dataType,displayName}], rows: JSON } }. parseErrors is non-empty when the query is syntactically/semantically invalid — read it for the exact field/dataset name issue.

query string
getSalesReport
annotations: none low

Sales analytics via ShopifyQL. Default columns: total_sales, gross_sales, net_sales, total_orders, average_order_value over the date range. Pass `query` to override with raw ShopifyQL.

query string endDate string startDate string
getProductAnalytics
annotations: none low

Get product performance analytics

limit number endDate string startDate string
getInventoryReport
annotations: none low

Get inventory analytics and forecasting

forecastDays number includeForecasting boolean
getMarketingReport
annotations: none low

Get marketing campaign performance

endDate string startDate string
getFinancialSummary
annotations: none low

Get financial summary including revenue, expenses, and profit

endDate string startDate string includeTaxes boolean includeRefunds boolean includeShipping boolean
getConversionReport
annotations: none low

Product performance via ShopifyQL. Default: top 25 products by total_sales over date range. Pass `query` to override with raw ShopifyQL (e.g. session/conversion-funnel queries).

query string endDate string startDate string
getAbandonmentReport
annotations: none low

Get cart and checkout abandonment analytics

endDate string startDate string
getTrafficReport
annotations: none low

Orders grouped by traffic source via ShopifyQL. Default: total_sales/orders/AOV by referrer_source. Pass `query` to override.

query string endDate string startDate string
getCustomReport
annotations: none low

Alias for runShopifyQL — pass a raw ShopifyQL string in `query`. See runShopifyQL description for syntax.

query string
listCompanies
annotations: none low

List B2B companies

limit number cursor string
createCompany
annotations: none low

Create a B2B company

name string note string externalId string contactEmail string contactPhone string

Permissions 0

No permissions indexed yet.

Scan Findings 121

low
Tool 'listProducts' has no annotations annotation_checker · 100%
low
Tool 'getProduct' has no annotations annotation_checker · 100%
low
Tool 'createProduct' has no annotations annotation_checker · 100%
low
Tool 'updateProduct' has no annotations annotation_checker · 100%
low
Tool 'listOrders' has no annotations annotation_checker · 100%
low
Tool 'getOrder' has no annotations annotation_checker · 100%
low
Tool 'listCustomers' has no annotations annotation_checker · 100%
low
Tool 'getCustomer' has no annotations annotation_checker · 100%
low
Tool 'getInventoryLevels' has no annotations annotation_checker · 100%
low
Tool 'adjustInventory' has no annotations annotation_checker · 100%
low
Tool 'setMetafield' has no annotations annotation_checker · 100%
low
Tool 'listCollections' has no annotations annotation_checker · 100%
low
Tool 'listLocations' has no annotations annotation_checker · 100%
low
Tool 'getShopInfo' has no annotations annotation_checker · 100%
low
Tool 'listDiscounts' has no annotations annotation_checker · 100%
low
Tool 'createDiscountCode' has no annotations annotation_checker · 100%
low
Tool 'listFulfillmentOrders' has no annotations annotation_checker · 100%
low
Tool 'createFulfillment' has no annotations annotation_checker · 100%
low
Tool 'getShippingZones' has no annotations annotation_checker · 100%
low
Tool 'listTransactions' has no annotations annotation_checker · 100%
low
Tool 'createRefund' has no annotations annotation_checker · 100%
low
Tool 'listGiftCards' has no annotations annotation_checker · 100%
low
Tool 'createGiftCard' has no annotations annotation_checker · 100%
low
Tool 'listPages' has no annotations annotation_checker · 100%
low
Tool 'createPage' has no annotations annotation_checker · 100%
low
Tool 'listBlogs' has no annotations annotation_checker · 100%
low
Tool 'createArticle' has no annotations annotation_checker · 100%
low
Tool 'createRedirect' has no annotations annotation_checker · 100%
low
Tool 'listThemes' has no annotations annotation_checker · 100%
low
Tool 'listWebhooks' has no annotations annotation_checker · 100%
low
Tool 'createWebhook' has no annotations annotation_checker · 100%
low
Tool 'listDraftOrders' has no annotations annotation_checker · 100%
low
Tool 'createDraftOrder' has no annotations annotation_checker · 100%
low
Tool 'listMetaobjectDefinitions' has no annotations annotation_checker · 100%
low
Tool 'listMetaobjects' has no annotations annotation_checker · 100%
low
Tool 'createMetaobject' has no annotations annotation_checker · 100%
low
Tool 'listMarkets' has no annotations annotation_checker · 100%
low
Tool 'listPriceRules' has no annotations annotation_checker · 100%
low
Tool 'listAbandonedCheckouts' has no annotations annotation_checker · 100%
low
Tool 'runShopifyQL' has no annotations annotation_checker · 100%
low
Tool 'getSalesReport' has no annotations annotation_checker · 100%
low
Tool 'getProductAnalytics' has no annotations annotation_checker · 100%
low
Tool 'getCustomerAnalytics' has no annotations annotation_checker · 100%
low
Tool 'getInventoryReport' has no annotations annotation_checker · 100%
low
Tool 'getMarketingReport' has no annotations annotation_checker · 100%
low
Tool 'getFinancialSummary' has no annotations annotation_checker · 100%
low
Tool 'getConversionReport' has no annotations annotation_checker · 100%
low
Tool 'getAbandonmentReport' has no annotations annotation_checker · 100%
low
Tool 'getTrafficReport' has no annotations annotation_checker · 100%
low
Tool 'getCustomReport' has no annotations annotation_checker · 100%
low
Tool 'listCompanies' has no annotations annotation_checker · 100%
low
Tool 'createCompany' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in den-indance-shopify-mcp-pro-0e54958/tests/p1-oauth-fixes.test.js auth_checker · 95%
high
Hardcoded OAuth client secret in den-indance-shopify-mcp-pro-0e54958/tests/p2-april26-migrations.test.js auth_checker · 95%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.8 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.8 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: listProducts manifest_parser · 70%
info
Tool: getProduct manifest_parser · 70%
info
Tool: createProduct manifest_parser · 70%
info
Tool: updateProduct manifest_parser · 70%
info
Tool: listOrders manifest_parser · 70%
info
Tool: getOrder manifest_parser · 70%
info
Tool: listCustomers manifest_parser · 70%
info
Tool: getCustomer manifest_parser · 70%
info
Tool: getInventoryLevels manifest_parser · 70%
info
Tool: adjustInventory manifest_parser · 70%
info
Tool: setMetafield manifest_parser · 70%
info
Tool: listCollections manifest_parser · 70%
info
Tool: listLocations manifest_parser · 70%
info
Tool: getShopInfo manifest_parser · 70%
info
Tool: listDiscounts manifest_parser · 70%
info
Tool: createDiscountCode manifest_parser · 70%
info
Tool: listFulfillmentOrders manifest_parser · 70%
info
Tool: createFulfillment manifest_parser · 70%
info
Tool: getShippingZones manifest_parser · 70%
info
Tool: listTransactions manifest_parser · 70%
info
Tool: createRefund manifest_parser · 70%
info
Tool: listGiftCards manifest_parser · 70%
info
Tool: createGiftCard manifest_parser · 70%
info
Tool: listPages manifest_parser · 70%
info
Tool: createPage manifest_parser · 70%
info
Tool: listBlogs manifest_parser · 70%
info
Tool: createArticle manifest_parser · 70%
info
Tool: createRedirect manifest_parser · 70%
info
Tool: listThemes manifest_parser · 70%
info
Tool: listWebhooks manifest_parser · 70%
info
Tool: createWebhook manifest_parser · 70%
info
Tool: listDraftOrders manifest_parser · 70%
info
Tool: createDraftOrder manifest_parser · 70%
info
Tool: listMetaobjectDefinitions manifest_parser · 70%
info
Tool: listMetaobjects manifest_parser · 70%
info
Tool: createMetaobject manifest_parser · 70%
info
Tool: listMarkets manifest_parser · 70%
info
Tool: listPriceRules manifest_parser · 70%
info
Tool: listAbandonedCheckouts manifest_parser · 70%
info
Tool: runShopifyQL manifest_parser · 70%
info
Tool: getSalesReport manifest_parser · 70%
info
Tool: getProductAnalytics manifest_parser · 70%
info
Tool: getCustomerAnalytics manifest_parser · 70%
info
Tool: getInventoryReport manifest_parser · 70%
info
Tool: getMarketingReport manifest_parser · 70%
info
Tool: getFinancialSummary manifest_parser · 70%
info
Tool: getConversionReport manifest_parser · 70%
info
Tool: getAbandonmentReport manifest_parser · 70%
info
Tool: getTrafficReport manifest_parser · 70%
info
Tool: getCustomReport manifest_parser · 70%
info
Tool: listCompanies manifest_parser · 70%
info
Tool: createCompany manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (7) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
info
SBOM generated: 231 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%