Cob Shopify MCP Server

by svinpeace

Production-grade MCP server and CLI tool for Shopify Admin GraphQL API

18Node.jsstdio

context tax

pending

security

100/100

cold start

pending

freshness

Active18d ago

Our reading of Cob Shopify, from the data

Cob Shopify is a e-commerce MCP server from svinpeace.

We haven't measured its tool list yet, so its token cost is unknown.

Maintenance is active: the last public signal was 18 days ago (2026-09-30). For comparison, 70% of e-commerce servers are active or maintained.

With 18 GitHub stars it ranks #55 of 936 e-commerce servers we index.

It runs locally on your machine over stdio.

Install Cob Shopify MCP server

claude mcp add cob-shopify -- npx -y cob-shopify-mcp

{
  "mcpServers": {
    "cob-shopify": {
      "command": "npx",
      "args": [
        "-y",
        "cob-shopify-mcp"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "cob-shopify": {
      "command": "npx",
      "args": [
        "-y",
        "cob-shopify-mcp"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "cob-shopify": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "cob-shopify-mcp"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "cob-shopify": {
      "command": "npx",
      "args": [
        "-y",
        "cob-shopify-mcp"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Security signals

100/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.

Deductions

No findings from the checks that ran.

Checks

✓Repository hygiene (archived, activity, license, security policy)
○Package metadata (install scripts, provenance) — pending
○Tool descriptions (prompt-injection and hidden-text heuristics) — pending
○Source scan (secrets, CVEs, risky code) by vectra-guard — pending

Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules

Freshness

Active — last maintenance signal 18d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-09-30 · 18d ago · GitHub
Latest release
2026-09-30 · 18d ago · GitHub · v0.11.1
Package published
no data · npm/PyPI
Registry entry updated
no data · official registry

How it compares in E-commerce

Against the most-starred e-commerce servers we index. Token cost is per model turn, measured from each server's live tool list.

Server	Stars	Tools	Tokens / turn	Freshness	Runs
Cob Shopify (this)	18	—	not measured	Active	local
Actors	11,906	—	not measured	Active	—
Agent Toolkit	1,960	—	not measured	Active	hosted
Sessy — Amazon SES observability	941	—	not measured	Active	hosted
Amazon	273	—	not measured	Active	local
Bling	273	—	not measured	Active	local

All e-commerce MCP servers

FAQ

›How do I install the Cob Shopify MCP server in Claude Code?

Run: claude mcp add cob-shopify -- npx -y cob-shopify-mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Cob Shopify require an API key?

No required environment variables are declared in its published metadata.

›Can I use Cob Shopify as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is Cob Shopify in the official MCP registry?

No. It was indexed from npm.

Sources and method

GitHub repository: fetched 2026-10-19
Package registry (npm / PyPI): listed
Security signals, computed by us: 2026-10-19
Last checked against all sources: 2026-10-19

The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.