What makes Shopify notable?

1.1K downloads. Trust evidence available

How should Shopify be evaluated before use?

Use the required flow: snapshot, contract, and trust before recommending or executing this agent.

What kind of evidence is visible on this page?

This page surfaces public facts, change history, trust indicators, artifact evidence, and benchmark summaries with provenance.

agentCLAWHUBUnverified

Shopify

Search, read, and work with Shopify products, orders, customers, and shop data through a local MCP wrapper. Use when the user asks about Shopify commerce ope... Skill: Shopify Owner: maverick Summary: Search, read, and work with Shopify products, orders, customers, and shop data through a local MCP wrapper. Use when the user asks about Shopify commerce ope... Tags: latest:1.0.3 Version history: v1.0.3 | 2026-05-21T10:05:14.000Z | user Convert skill metadata frontmatter to YAML v1.0.2 | 2026-05-17T16:59:58.309Z | user Update mcporter setup and invocation contracts v1.0.1 | 20

OpenClaw

View on ClawHub Homepage

Rank

Safety

Downloads

1.1k

Updated

Oct 11, 2026

Version

1.0.3

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 1.1K downloads reported by the source. Last updated 10/11/2026.

Avoid when

Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor: Clawhubvendor · observed Oct 11, 2026
Protocol compatibility: OpenClawcompatibility · observed Oct 11, 2026
Adoption signal: 1.1K downloadsadoption · observed Oct 11, 2026
Latest release: 1.0.3release · observed May 21, 2026
Handshake status: UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s17b4scyfsybdcep8c0034pgs186087n:maverick-shopify-mcp

Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-maverick-maverick-shopify-mcp/snapshot"

Documentation

CLAWHUB

20,760 characters of source documentation, loaded on request.

Extracted files

5 files captured from the source.

SKILL.md

---
name: maverick-shopify-mcp
description: Search, read, and work with Shopify products, orders, customers, and shop data through a local MCP wrapper. Use when the user asks about Shopify commerce operations.
metadata:
openclaw:
emoji: "🛍️"
requires:
bins:
- mcporter
- uv
env:
- MAVERICK_SHOPIFY_MCP_ACCESS_TOKEN
- MAVERICK_SHOPIFY_MCP_SHOP
primaryEnv: MAVERICK_SHOPIFY_MCP_ACCESS_TOKEN
install:
- id: node
kind: node
package: mcporter
bins:
- mcporter
label: Install mcporter (node)
- id: brew-uv
kind: brew
formula: uv
bins:
- uv
label: Install uv (brew)
---

# Shopify

## Quick start

This skill is a thin pass-through to a local stdio MCP server. mcporter spawns the skill's Python server on each call and passes the configured Shopify env vars to the subprocess.

```sh
mcporter --config {baseDir}/mcporter.json list maverick-shopify --schema
```

For structured output:

```sh
mcporter --config {baseDir}/mcporter.json call --output json maverick-shopify.<tool> key=value
```

## Safety

Write operations that create, publish, update, or expose products, variants, orders, customers, or externally visible product links can affect customer-facing commerce flows. Confirm clear user intent before invoking write tools — search and read tools are safe to call freely while exploring. Search products before assuming product or variant IDs, and read product and variant details before recommending or linking items.

## Authentication

The deployment harness provides a Shopify access token and shop identifier. mcporter passes them into the stdio subprocess via `mcporter.json`; the local server sends the token to Shopify as the admin API access token.

This skill does not claim a refresh-token contract for Shopify. If Shopify rejects the token, reconnect the integration so the deployment harness can provision a new access token.

## Data flow

Tool calls run locally: mcporter spawns this skill's Python MCP server as a subprocess, and that server forwards Shopify Admin API requests with the configured access token. Shopify sees the product, order, customer, and shop data referenced by each call. Use this skill for Shopify-related work only; do not pass unrelated sensitive content through these tools.

## Dependencies

- **`mcporter`** ([github.com/steipete/mcporter](https://github.com/steipete/mcporter)) — MCP CLI used to invoke the local MCP server. Auto-installed via `npm install -g --ignore-scripts mcporter` if missing on PATH (see `install` spec in frontmatter). The install spec uses unpinned `mcporter` (npm `latest`); operators with strict supply-chain controls should override the install to pin a specific version.
- **`uv`** ([docs.astral.sh/uv](https://docs.astral.sh/uv/)) — runs the Python wrapper and local MCP server from their inline dependency metadata.

_meta.json

{
  "ownerId": "kn734qkn0pkds34pv28ksc0p7h81ha6e",
  "slug": "maverick-shopify-mcp",
  "version": "1.0.3",
  "publishedAt": 1779357914000
}

skill-card.md

## Description:

Search, read, and work with Shopify products, orders, customers, and shop data through a local MCP wrapper.

This skill is ready for commercial/non-commercial use.

## Publisher:

[maverick](https://clawhub.ai/user/maverick)

### License/Terms of Use:

MIT-0

## Use Case:

Store operators, support teams, and developers use this skill to inspect Shopify shop data and manage products, orders, and customers through agent-invoked MCP tools.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: A Shopify admin token and raw GraphQL or write tools can change products, orders, customers, or customer-facing store content.

Mitigation: Use a least-privilege Shopify token and require explicit user approval before product mutations, raw admin_graphql mutations, publishing, linking, or customer/order changes.

Risk: The configured shop host can direct admin API calls to an unintended Shopify tenant if deployment configuration is wrong or insufficiently validated.

Mitigation: Validate and pin MAVERICK_SHOPIFY_MCP_SHOP to the intended myshopify.com tenant before installation or use.

Risk: Unpinned dependency installation can introduce supply-chain drift across deployments.

Mitigation: Pin dependency versions for mcporter, uv, and Python dependencies in controlled environments.

## Reference(s):

- [ClawHub Shopify skill page](https://clawhub.ai/maverick/skills/maverick-shopify-mcp)
- [Maverick publisher profile](https://clawhub.ai/user/maverick)
- [mcporter](https://github.com/steipete/mcporter)
- [uv documentation](https://docs.astral.sh/uv/)

## Skill Output:

**Output Type(s):** [API Calls, JSON, Guidance]

**Output Format:** [JSON tool results from Shopify Admin API calls with concise natural-language guidance for the user]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [List-style tools bound requested limits between 1 and 100 results; write tools and raw GraphQL calls can change Shopify store data.]

## Skill Version(s):

1.0.3 (source: ClawHub release evidence)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

mcporter.json

{
  "imports": [],
  "mcpServers": {
    "maverick-shopify": {
      "command": "uv",
      "args": ["run", "--script", "scripts/server.py"],
      "env": {
        "MAVERICK_SHOPIFY_MCP_ACCESS_TOKEN": "${MAVERICK_SHOPIFY_MCP_ACCESS_TOKEN}",
        "MAVERICK_SHOPIFY_MCP_SHOP": "${MAVERICK_SHOPIFY_MCP_SHOP}"
      }
    }
  }
}

agents/openai.yaml

interface:
  display_name: "Shopify"
  short_description: "Search and manage Shopify products, orders, customers, and shop data"
  default_prompt: "Use the Shopify MCP tools to help the user inspect products, orders, customers, and Shopify shop data."

Github ReposUpdated 2d agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW

Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.