Shopify Dev Mcp

Use when user wants to work with Shopify Admin API, Storefront API, validate Liquid code, explore GraphQL schemas, build Shopify apps, or inspect Shopify doc...

This skill is broadly coherent with Shopify development tasks, but it references tools and sensitive environment variables that are not declared in the skill metadata. Before installing or using it: 1) expect to need Shopify API credentials (API key/secret and store URL) to use the MCP server — do not paste these into an unknown service; 2) prefer running @shopify/dev-mcp and mcporter from trusted sources (audit the installed package or pin a known-good version); 3) be cautious when the skill or its recommended CLI creates webhooks or posts to external URLs — verify webhook destinations; 4) ask the skill author or publisher for an explicit install spec and a list of required env vars if you need to run this in a shared environment. If you want me to, I can list the exact places in the SKILL.md that mention credentials and external commands or suggest a safer deployment checklist.

Type: OpenClaw Skill Name: shopify-dev-mcp Version: 1.0.0 The shopify-dev-mcp skill bundle provides a legitimate set of tools and instructions for Shopify development, including GraphQL introspection, Liquid validation, and documentation search. It utilizes a standard MCP (Model Context Protocol) server pattern and requires typical Shopify API credentials for operation. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found in SKILL.md or references/api-guide.md.