Shopify

Agents act on commerce through documented tools at every step of the buyer journey: catalog search across all Shopify merchants or one storefront, Cart MCP to build and iterate carts, Checkout MCP to convert carts into checkout sessions, and an order tool to fetch order state on demand.

Sourceshopify.dev/docs/agentsread 2026-09-18

Shopify's agent surface carries one purchase through a fixed sequence of stages: negotiation and authentication, product discovery, a cart built over several turns, conversion of that same cart into a checkout, and order monitoring after it, with one documented branch where checkout escalates to the buyer's browser when completion needs the buyer. The sequence is set by the protocol and the only branch is the escalation; a builder cannot define its own loops, branches, retries or fallback paths on Shopify's side, and the orchestration of the purchase belongs to the outside agent.

Sourceshopify.dev/docs/agentsread 2026-09-18

Agents are grounded in live product data. The Global Catalog lets an agent search products across every Shopify merchant from a single endpoint, a Storefront Catalog scopes discovery to one merchant, and agents fetch the variant details needed to build a cart; as merchants add or change products, the catalog the agent searches changes with them, without retraining.

Sourceshopify.dev/docs/agentsread 2026-09-18

The purchase is a consent checkpoint for the buyer. Checkout MCP converts an agent's cart into a checkout session and refers the buyer to the merchant storefront to complete the purchase, and when completion needs the buyer, the checkout escalates by opening the merchant's continue URL in the buyer's own browser, so a person confirms and pays.

Sourceshopify.dev/docs/agents/carts-and-checkout/checkout-mcpread 2026-09-18

Shopify states it has been issued SOC 2 Type II and SOC 3 reports for the service it provides and is certified Level 1 PCI DSS compliant. On the agent surface, traffic to Shopify's MCP servers is classified into token, signed and anonymous tiers by how the agent identifies itself, stronger identification unlocks more sensitive tools and higher rate limits, checkout tools require authentication or a signed request, and buyer-linked tokens tie an agent's requests to a buyer.

Sourceshopify.com/securityread 2026-09-18

The agent facing documentation covers order state for the agent, through order webhooks and an order lookup tool, which is commerce state rather than a record of the agent's own behavior.

SourceThe merchant-side Agentic Storefronts admin is documented on Shopify's help center; ask the vendor whether it records what agents did on the merchant's channel, shopify.dev agents documentation; help.shopify.com/en/manual/online-sales-channels/agentic-storefrontsread 2026-09-18

Cart state persists across the conversation: agents build carts as buyers iterate, adding line items, applying localization and estimating totals across multiple turns, then convert the same cart into a checkout. The cart and order are commerce records rather than a memory the agent keeps, and no agent memory layer with its own scope and lifetime, or a way to review, edit, delete or scope memories by user, team or workspace, is documented.

Sourceshopify.dev/docs/agentsread 2026-09-18

As a hosted commerce platform, Shopify offers no self hosting option, and its security page covers certifications but not where data is hosted or whether a region can be chosen.

Sourceshopify.com/securityread 2026-09-18

Shopify ships packaged assets agent builders can adopt: the Shopify AI Toolkit installs as a plugin in Claude Code, Codex, Cursor and other AI tools, connecting them to Shopify's documentation and API schemas and installing a ucp skill that lets an agent call every checkout tool, alongside a UCP CLI with structured commands for search, carts and checkout, and a six-part tutorial series that runs the full commerce flow.

Sourceshopify.dev/docs/apps/build/ai-toolkitread 2026-09-18

Work reaches the agent without a person asking: after checkout, Shopify pushes the full current order state to the agent's registered endpoint through order webhooks whenever a committed change occurs, across fulfillment events, returns, refunds, exchanges and order edits, and Shopify describes webhooks as the primary signal for proactive notifications.

Sourceshopify.dev/docs/agents/ordersread 2026-09-18

Shopify offers no model selection or routing of its own on this surface: agents reach it built on whatever model their builders choose, through MCP servers and the Universal Commerce Protocol.

Sourceshopify.dev/docs/agentsread 2026-09-18

The platform is callable from outside by any agent. Shopify's UCP-compliant MCP servers expose catalog search, carts, checkout and order tools to external agents; an agent identifies itself with a UCP profile hosted at a well-known URL that declares its protocol version and capabilities, and is placed in a token, signed or anonymous tier with the tools and rate limits documented for each.

Sourceshopify.dev/docs/agents/profiles/auth-and-rate-limitingread 2026-09-18

The Shopify AI Toolkit validates GraphQL queries, Liquid templates and Shopify extensions against Shopify schemas so issues are caught before release.

Sourceshopify.dev/docs/apps/build/ai-toolkitread 2026-09-18

Agents do not operate a browser on this surface. They transact through structured MCP tool calls against Shopify endpoints, catalog search, carts, checkout and orders, rather than by operating a storefront page, and the only browser in the documented flow is the buyer's own, opened at the merchant's checkout URL for the buyer to complete the purchase.

Sourceshopify.dev/docs/agents/carts-and-checkout/checkout-mcpread 2026-09-18