74
/ 100
27 days ago
glama
Kockatoos Shopify MCP Server
An MCP server providing AI agents with full access to the Shopify Admin API via 136 tools for managing products, orders, customers, collections, and more.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: SHOPIFY_CLIENT_SECRET. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 2 credentials: SHOPIFY_ACCESS_TOKEN, SHOPIFY_CLIENT_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
SHOPIFY_ACCESS_TOKEN— "": "shpat_xxxxxxxxxxxxxxxxxxxx"config
SHOPIFY_API_VERSION— No API version (defaults to 2026-01)config
SHOPIFY_CLIENT_ID— xxx SHOPIFY_CLIENT_SECRET=yyy SHOPIFY_STORE_NAME=zzz \🔐 secret
SHOPIFY_CLIENT_SECRET— SHOPIFY_CLIENT_ID=xxx =yyy SHOPIFY_STORE_NAME=zzz \config
SHOPIFY_SCOPESconfig
SHOPIFY_STORE_NAME— "": "your-store-name",// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/untitled-developers-shopify-mcp-140qfj)commit: f7c3454119662bd5ccf5c8cfaacc4809cc61febd
code hash: f442ee013d02ad2bb23624d7b9bf2e0f224c23bb66d1ee20885d5423fad28ca8
verified: 6/15/2026, 2:04:29 PM