---
bezeichner: "io.github.jpka/shopify-operations-mcp"
art: "mcp_server"
slug: "io-github-jpka-shopify-operations-mcp"
paketkoordinate: "npm:shopify-operations-mcp"
status: "aktiv"
homepage: "https://github.com/jpka/shopify-operations-mcp"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.jpka"
registerseite: "https://tracevero.de/mcp/io-github-jpka-shopify-operations-mcp"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: true
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
einsatzgebiet: "handel"
roh_beschreibung: "Safe-write Shopify operations: plan-before-execute writes with out-of-band approval and audit."
version: "0.1.2"
roh_umgebungsvariablen: "SHOPIFY_STORE_DOMAIN, SHOPIFY_ADMIN_TOKEN, SHOPIFY_CONFIG, SHOPIFY_PLAN_TTL_MS, SHOPIFY_APPROVAL_SERVER_PORT, SHOPIFY_PROTECTED_TAGS, SHOPIFY_CALLER_ID, SHOPIFY_AUDIT_PATH"
roh_geheime_pflichtvariablen: "SHOPIFY_ADMIN_TOKEN"
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/jpka/shopify-operations-mcp"
roh_paketquellen: "npm"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-08-17"
roh_aktualisiert_am: "2026-08-17"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "shopify-operations-mcp"
roh_paketversionen: "0.1.2"
roh_laufzeithinweise: ""
roh_umgebungsformate: "string"
roh_umgebungsbeschreibungen: "SHOPIFY_ADMIN_TOKEN=Shopify Admin API access token. Required and only ever read from the environment — never from the config file. · SHOPIFY_APPROVAL_SERVER_PORT=Port the localhost human-approval HTTP server binds to (127.0.0.1 only). Default 4319. · SHOPIFY_AUDIT_PATH=File path for the tamper-evident JSONL audit log. Default shopify-operations-audit.jsonl in the working directory. · SHOPIFY_CALLER_ID=Identity recorded as the caller on every audit log row. Default unknown. · SHOPIFY_CONFIG=Path to a config.json with shopify/plans/approvalServer/protectedTags settings. Defaults to ./config.json in the working directory. · SHOPIFY_PLAN_TTL_MS=How long a plan token stays valid before it must be executed or expires, in milliseconds. Default 60000. · SHOPIFY_PROTECTED_TAGS=Comma-separated tags that plans may never modify; any plan touching an item carrying one is refused. Default do-not-touch. · SHOPIFY_STORE_DOMAIN=The myshopify.com store domain, e.g. my-store.myshopify.com. Overrides shopify.storeDomain from the config file."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"shopify-operations-mcp\",\"version\":\"0.1.2\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"SHOPIFY_STORE_DOMAIN\",\"description\":\"The myshopify.com store domain, e.g. my-store.myshopify.com. Overrides shopify.storeDomain from the config file.\",\"format\":\"string\",\"required\":true,\"secret\":false},{\"name\":\"SHOPIFY_ADMIN_TOKEN\",\"description\":\"Shopify Admin API access token. Required and only ever read from the environment — never from the config file.\",\"format\":\"string\",\"required\":true,\"secret\":true},{\"name\":\"SHOPIFY_CONFIG\",\"description\":\"Path to a config.json with shopify/plans/approvalServer/protectedTags settings. Defaults to ./config.json in the working directory.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"SHOPIFY_PLAN_TTL_MS\",\"description\":\"How long a plan token stays valid before it must be executed or expires, in milliseconds. Default 60000.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"SHOPIFY_APPROVAL_SERVER_PORT\",\"description\":\"Port the localhost human-approval HTTP server binds to (127.0.0.1 only). Default 4319.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"SHOPIFY_PROTECTED_TAGS\",\"description\":\"Comma-separated tags that plans may never modify; any plan touching an item carrying one is refused. Default do-not-touch.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"SHOPIFY_CALLER_ID\",\"description\":\"Identity recorded as the caller on every audit log row. Default unknown.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"SHOPIFY_AUDIT_PATH\",\"description\":\"File path for the tamper-evident JSONL audit log. Default shopify-operations-audit.jsonl in the working directory.\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# shopify-operations-mcp

## Gemessene Werte

| Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe |
| --- | --- | --- | --- | --- | --- |
| Pflicht-Geheimnisse deklariert | true | MCP-Register | 2026-08-16T01:17:01.420Z | abgeleitet | roh_geheime_pflichtvariablen: SHOPIFY_ADMIN_TOKEN; roh_geheime_pflichtkopfzeilen: |
| Ausführungsort | lokal | MCP-Register | 2026-08-16T01:17:01.420Z | abgeleitet | roh_transportarten: stdio |
| Pfadargument vorhanden | false | MCP-Register | 2026-08-16T01:17:01.420Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository-Adresse geführt | true | MCP-Register | 2026-08-16T01:17:01.420Z | abgeleitet | roh_repository_url: https://github.com/jpka/shopify-operations-mcp |
| Einsatzgebiet, aus der Anbieterbeschreibung abgeleitet | handel | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: Safe-write Shopify operations: plan-before-execute writes with out-of-band approval and audit. |
| Beschreibung (Rohangabe) | Safe-write Shopify operations: plan-before-execute writes with out-of-band approval and audit. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft |  |
| Deklarierte Version | 0.1.2 | MCP-Register | 2026-08-18T01:17:01.679Z | selbstauskunft |  |
| Umgebungsvariablen (Rohangabe) | SHOPIFY_STORE_DOMAIN, SHOPIFY_ADMIN_TOKEN, SHOPIFY_CONFIG, SHOPIFY_PLAN_TTL_MS, SHOPIFY_APPROVAL_SERVER_PORT, SHOPIFY_PROTECTED_TAGS, SHOPIFY_CALLER_ID, SHOPIFY_AUDIT_PATH | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Geheime Pflichtvariablen (Rohangabe) | SHOPIFY_ADMIN_TOKEN | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Transportarten (Rohangabe) | stdio | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Pfadargumente (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository (Rohangabe) | https://github.com/jpka/shopify-operations-mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Paketquellen (Rohangabe) | npm | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Geheime Pflichtkopfzeilen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Pfad-Umgebungsvariablen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote-Adressen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote-Hosts (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Statusmeldung des Registers (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Im Register eingetragen am (Rohangabe) | 2026-08-17 | MCP-Register | 2026-08-18T01:17:01.679Z | selbstauskunft |  |
| Im Register geändert am (Rohangabe) | 2026-08-17 | MCP-Register | 2026-08-18T01:17:01.679Z | selbstauskunft |  |
| Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository-Plattform (Rohangabe) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository-Unterordner (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Paketbezeichner (Rohangabe) | shopify-operations-mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Paketversionen (Rohangabe) | 0.1.2 | MCP-Register | 2026-08-18T01:17:01.679Z | selbstauskunft |  |
| Laufzeithinweise (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Formate der Umgebungsvariablen (Rohangabe) | string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Beschreibungen der Umgebungsvariablen (Rohangabe) | SHOPIFY_ADMIN_TOKEN=Shopify Admin API access token. Required and only ever read from the environment — never from the config file. · SHOPIFY_APPROVAL_SERVER_PORT=Port the localhost human-approval HTTP server binds to (127.0.0.1 only). Default 4319. · SHOPIFY_AUDIT_PATH=File path for the tamper-evident JSONL audit log. Default shopify-operations-audit.jsonl in the working directory. · SHOPIFY_CALLER_ID=Identity recorded as the caller on every audit log row. Default unknown. · SHOPIFY_CONFIG=Path to a config.json with shopify/plans/approvalServer/protectedTags settings. Defaults to ./config.json in the working directory. · SHOPIFY_PLAN_TTL_MS=How long a plan token stays valid before it must be executed or expires, in milliseconds. Default 60000. · SHOPIFY_PROTECTED_TAGS=Comma-separated tags that plans may never modify; any plan touching an item carrying one is refused. Default do-not-touch. · SHOPIFY_STORE_DOMAIN=The myshopify.com store domain, e.g. my-store.myshopify.com. Overrides shopify.storeDomain from the config file. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Symbolformate (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"npm","identifier":"shopify-operations-mcp","version":"0.1.2","transport":"stdio","environment":[{"name":"SHOPIFY_STORE_DOMAIN","description":"The myshopify.com store domain, e.g. my-store.myshopify.com. Overrides shopify.storeDomain from the config file.","format":"string","required":true,"secret":false},{"name":"SHOPIFY_ADMIN_TOKEN","description":"Shopify Admin API access token. Required and only ever read from the environment — never from the config file.","format":"string","required":true,"secret":true},{"name":"SHOPIFY_CONFIG","description":"Path to a config.json with shopify/plans/approvalServer/protectedTags settings. Defaults to ./config.json in the working directory.","format":"string","required":false,"secret":false},{"name":"SHOPIFY_PLAN_TTL_MS","description":"How long a plan token stays valid before it must be executed or expires, in milliseconds. Default 60000.","format":"string","required":false,"secret":false},{"name":"SHOPIFY_APPROVAL_SERVER_PORT","description":"Port the localhost human-approval HTTP server binds to (127.0.0.1 only). Default 4319.","format":"string","required":false,"secret":false},{"name":"SHOPIFY_PROTECTED_TAGS","description":"Comma-separated tags that plans may never modify; any plan touching an item carrying one is refused. Default do-not-touch.","format":"string","required":false,"secret":false},{"name":"SHOPIFY_CALLER_ID","description":"Identity recorded as the caller on every audit log row. Default unknown.","format":"string","required":false,"secret":false},{"name":"SHOPIFY_AUDIT_PATH","description":"File path for the tamper-evident JSONL audit log. Default shopify-operations-audit.jsonl in the working directory.","format":"string","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |

## Verweise

- Namensraum: [[namensraum/io-github-jpka|io.github.jpka]]

---

- Registerseite: <https://tracevero.de/mcp/io-github-jpka-shopify-operations-mcp>
- Abgerufen am: 2026-10-11
