How do I install Storeport?

Storeport is a local plugin. Install it using npm package: @reneturcios/storeport and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Storeport safe to use?

Storeport scored 5.2/10 (moderate risk) in MCP Marketplace's automated security scan. It has 2 high or critical findings to review. It's listed, but review the security report on this page before installing.

What AI apps work with Storeport?

Storeport uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Storeport MCP Server

by CloudCorpRecords

Developer ToolsModerate5.2MCP RegistryLocal

Free

Server data from the Official MCP Registry

Shopify developer docs, API learning, GraphQL introspection, and code validation.

About

Shopify developer docs, API learning, GraphQL introspection, and code validation.

Security Report

5.2

Moderate5.2Moderate Risk

storeport is a keyless client for Shopify's public developer service. It sends no credentials, reads only the optional SHOPIFY_DEV_BASE_URL variable, and its tools match the stated purpose. The main concern is that fetch_full_docs will GET any absolute URL the client supplies and return the response to the model, which could be abused for SSRF-style fetches through prompt injection. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-storeport": {
      "args": [
        "-y",
        "@reneturcios/storeport"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

storeport

storeport is a small companion for building on Shopify. Shopify's developer surface is broad — many APIs, a large GraphQL schema, and a lot of documentation — so storeport gathers the everyday developer tasks into one place: start learning an API with guided context, search the documentation and pull a full page when a chunk is not enough, look up types and fields in the Admin GraphQL schema, ask the developer assistant a direct question, and check GraphQL and component code blocks before they ship. One binary serves a command-line interface and a stdio MCP server.

No Shopify store token and no API key are required. The upstream is Shopify's public developer service, and storeport sends no authorization header. The base URL defaults to https://shopify.dev and can be overridden with the SHOPIFY_DEV_BASE_URL environment variable.

Install

npx @reneturcios/storeport search "metafields"

Or run the container image:

docker run -i ghcr.io/cloudcorprecords/storeport

The container defaults to the MCP server (see below). Pass CLI arguments to use it as a CLI instead.

CLI

storeport learn admin-graphql
storeport learn functions --conversation-id conv-1
storeport search "checkout extensibility"
storeport search webhooks --max 5
storeport docs https://shopify.dev/docs/apps/build/checkout
storeport docs /docs/api/admin-graphql
storeport introspect Product
storeport introspect Order --api-version 2025-10
storeport ask "How do I store extra product data?"
storeport validate-graphql '{ shop { name } }'
storeport validate-components '<s-page heading="Hi"></s-page>'

storeport --version

Each command prints the upstream JSON payload. Exit codes: 0 on success, 1 when a call fails (including an upstream API error), 2 for usage errors. Empty queries, prompts, content, and URLs are rejected before any request is made.

MCP server

One bin serves both faces. The mcp subcommand starts a stdio MCP server:

npx -y @reneturcios/storeport mcp

MCP client configuration:

{
  "mcpServers": {
    "storeport": {
      "command": "npx",
      "args": ["-y", "@reneturcios/storeport", "mcp"]
    }
  }
}

No env block is needed: the server is keyless.

Tools

Tool	Input	What it returns
`learn_shopify_api`	`api` (required), `conversationId` (optional)	The guided learning context for the named API.
`search_docs_chunks`	`query` (required), `maxNumResults` (optional)	The most relevant documentation chunks.
`fetch_full_docs`	`url` (required)	The full text of one documentation page; an absolute URL is fetched as-is, a path is joined to the base URL.
`introspect_graphql_schema`	`query` (required), `apiVersion` (optional)	Admin GraphQL types and fields matching the term.
`prompt_shopify_dev_assistant`	`prompt` (required), `conversationId` (optional)	The developer assistant's answer.
`validate_graphql_codeblocks`	`content` (required), `apiVersion` (optional)	Validation results per GraphQL code block.
`validate_component_codeblocks`	`content` (required)	Validation results for Shopify component code blocks.

All calls go to the Shopify developer service under the configured base URL (default https://shopify.dev). This build covers a core subset of the documented developer surface: Liquid/theme codeblock validation, component validation for other frameworks, and docs update/feedback tools are not included.

Development

npm install
npm run build   # tsc -> dist/
npm test        # node test runner over test/*.test.ts, no network (fake fetch fixtures)
npm run dev     # run the CLI from source via tsx

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!

4.8

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.