Your store is already agent-queryable: Shopify's MCP servers
Last reviewed
Short answer
MCP, the Model Context Protocol, is how AI agents call tools, and Shopify runs UCP-compliant MCP servers for stores: a Storefront server for catalog search and carts requiring no authentication, and a Customer Accounts server behind OAuth. We probed live stores and the endpoint answers with real tools, search the catalog, create a cart, create and complete a checkout. This exists whether or not you have heard of it.
What we actually found on live stores
On 29 August 2026 we called the MCP endpoint, /api/ucp/mcp, on several Shopify-rendered storefronts and asked it to list its tools. It answered with a working set: search_catalog, create_cart, create_checkout, update_checkout, complete_checkout, get_checkout. A machine-readable merchant profile sits at /.well-known/ucp, and an agentic discovery sitemap points agents at the agents.md file.
Translated out of protocol: an AI agent can discover your store, search your products, build a cart and walk a checkout flow, over a documented interface, today. The payment step carries the rule printed in agents.md itself, that agents must not complete payment without explicit buyer consent.
The servers Shopify documents
Shopify's developer docs describe the lineup. The Storefront MCP server handles searching the store's catalog and managing carts and requires no authentication, which is what makes the open probe above possible. The Customer Accounts MCP server covers order tracking and returns and requires OAuth with PKCE, so a shopper's agent acts on their account only with their sign-in. Checkout capabilities are referenced across the agentic docs, with reporting describing full checkout completion as gated to select partners for now, secondary sourcing, so treat the edges as moving.
The docs hub frames all of it as UCP-compliant infrastructure, alongside a Global Catalog that lets an agent search across every Shopify merchant from a single endpoint, with trust tiers deciding how much access a given agent gets, higher tiers unlocking direct checkout completion.
What a merchant controls, and what a merchant should do
You did not opt into this and mostly cannot opt out of the plumbing separately: the endpoints are part of Shopify-rendered storefronts, and the participation controls that exist are the channel toggles plus the Unlisted status per product. Headless stores are the exception again, none of these endpoints exist on custom infrastructure unless you build them.
The useful response is not alarm, it is inventory hygiene. Every tool in that list reads the same product data this whole site is about: search_catalog returns your titles and descriptions, create_checkout trips over wrong availability. An agent-queryable store with unreadable product data is a well-plumbed house with nothing in the cupboards, and the feed rules are the shopping list.
Frequently asked questions
Is it safe that my store answers unauthenticated agent queries?
The unauthenticated surface is your public catalog, the same products a browser sees, plus cart mechanics. Customer data sits behind the OAuth server, and payment completion requires buyer consent per the published rules and is tier-gated. It is your storefront with a machine-readable door, not your back office.
Can I turn the MCP endpoints off?
Not as a standalone switch. Participation is managed through the agentic channel controls and per-product Unlisted status. The endpoints are storefront infrastructure, the way /products/handle.json has long been.
Do any real agents use this yet?
The consumer surfaces documented to transact with Shopify stores, Copilot Checkout, Google AI Mode and Gemini, run on this UCP infrastructure per Shopify's own announcement. Independent agent traffic is early and hard to observe from a hosted store, which is honest to say.
I'm headless. Do I have MCP endpoints?
No. We verified a major headless storefront returns 404 on all of these paths. Shopify's agentic infrastructure rides the storefront rendering layer, and a headless build takes on serving any agent-facing surface itself.
Sources
Keep reading
Score your own catalog
Entitled grades every product against the rules on this page, explains each failure, and fixes them with AI you approve. The score is free forever.