Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add dzunglaviet/shopify-mcp --skill skillgit clone --depth 1 https://github.com/dzunglaviet/shopify-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dzunglaviet/shopify-mcp/skill)<a href="https://agentmods.dev/skills/dzunglaviet/shopify-mcp/skill"><img src="https://agentmods.dev/badge/skills/dzunglaviet/shopify-mcp/skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dzunglaviet/shopify-mcp/skill"><img src="https://agentmods.dev/badge/skills/dzunglaviet/shopify-mcp/skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00646 |
| Opus 5.5 | $0.00000 | $0.00258 |
| Sonnet 5.5 | $0.00000 | $0.00129 |
| Haiku 4.5 | $0.00000 | $0.00065 |
Grade B, and why
skill scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
Add to `~/.claude/settings.json`: This is a copy
100% identical to shopify-mcp — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Shopify MCP
Manage your Shopify store directly from Claude / OpenClaw — orders, customers, products, and inventory — using natural language.
Powered by shopify-mcp, a Python MCP server connecting to the Shopify Admin REST API. Supports multiple stores, static access tokens, and OAuth client credentials.
Tools
Orders — shopify_list_orders, shopify_get_order, shopify_update_order, shopify_cancel_order, shopify_fulfill_order
Customers — shopify_list_customers, shopify_get_customer, shopify_update_customer
Products & Inventory — shopify_list_products, shopify_get_product, shopify_update_inventory
Setup
1. Clone and install
git clone https://github.com/dzunglaviet/shopify-mcp
cd shopify-mcp
python3 -m venv venv
venv/bin/pip install -r requirements.txt
2. Create a Shopify Custom App
- Shopify Admin → Settings → Apps → Develop apps → Create an app
- Configuration → Admin API scopes — enable:
read_orders,write_orders,read_customers,write_customers,read_products,read_inventory,write_inventory,read_fulfillments,write_fulfillments - API credentials → Install app → copy the
shpat_...token
3. Configure .env
cp .env.example .env
Fill in your credentials:
SHOPIFY_SHOP_DOMAIN=your-store.myshopify.com
SHOPIFY_ACCESS_TOKEN=shpat_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
SHOPIFY_API_VERSION=2026-04
4. Add to Claude Code / OpenClaw
Add to ~/.claude/settings.json:
{
"mcpServers": {
"shopify-mcp": {
"command": "/absolute/path/to/shopify-mcp/venv/bin/python",
"args": ["server.py"],
"cwd": "/absolute/path/to/shopify-mcp"
}
}
}
Restart Claude Code / OpenClaw after saving.
Example prompts
List the last 10 open orders
Show me order #1042
Find customer with email: [email protected]
Cancel order 6543210987654 — customer changed their mind
Fulfill order 6543210987654 with GHN tracking number ABC123456789
Set inventory for inventory_item_id 11223344 to 50 units
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 83 lines · 0 tokens per session scan B 3248f9baea67
skill is a skill published in the GitHub repository dzunglaviet/shopify-mcp (0 stars, last pushed 5mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 646 tokens. A static security scan graded it B with 1 finding (reads agent configuration directories). It is 100% identical to shopify-mcp, differing in 0 lines, and is treated as a copy.
skill compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| skilldzunglaviet/shopify-mcp | Skill | 0 | 5mo ago | MIT | B | 0 | Claude Code, Codex |
| amazon-reviews-api-skillbrowser-act/skills | Skill | 6.3k | 3d ago | MIT | A | 124 | Claude Code, Codex |
| amazon-competitor-analyzerbrowser-act/skills | Skill | 6.3k | 3d ago | MIT | A | 48 | Claude Code, Codex |
| asc-subscription-localizationrorkai/app-store-connect-cli-skills | Skill | 1.1k | today | MIT | A | 60 | Claude Code |
| external-purchasesrshankras/claude-code-apple-skills | Skill | 867 | today | MIT | A | 76 | Claude Code |
| food-orderBitterbot-AI/bitterbot-desktop | Skill | 2.5k | today | MIT | A | 53 | Claude Code, Codex |
| Product Photoshoot Workflowjau123/MeiGen-AI-Design-MCP | Skill | 1.8k | yesterday | MIT | A | 111 | Claude Code |