What is MCP?
The Model Context Protocol (MCP) is an open standard that allows AI agents to interact with external tools and data sources. Think of it as a USB-C port for AI — a standardized way for AI agents to connect to your store.
Why MCP Matters for Ecommerce
Before MCP, AI agents could only read your store's public web pages. Now they can:
- Search your catalog — find products by any criteria
- Get detailed information — read full product specs, variants, and prices
- Compare products — evaluate multiple options side by side
- Check promotions — find what's on sale
- Get recommendations — discover related products
How Shopigent AI GEO Implements MCP
Shopigent AI GEO provides a full MCP server with 8 tools:
POST /api/mcp
Authorization: Bearer <your-api-key>
Tools Available
| Tool | What It Does |
|---|---|
search_products |
Full-text search with filters |
get_product_details |
Complete product information |
compare_products |
Side-by-side comparison |
get_promotions |
Current sales and discounts |
get_store_info |
Store metadata |
get_popular_products |
Best-rated products |
get_product_recommendations |
AI-powered suggestions |
get_category_tree |
Category navigation |
Setting Up MCP for Your Store
- Install Shopigent AI GEO from the Shopify App Store
- Generate an API key in Settings → MCP Storefront
- Configure your AI agent with the endpoint and key
Example: Claude Desktop Configuration
{
"mcpServers": {
"shopigent-ai-geo": {
"url": "https://discovery-app-production-4a32.up.railway.app/api/mcp",
"headers": {
"Authorization": "Bearer shpg_disc_your_key_here"
}
}
}
}
Example: Direct API Call
curl -X POST https://discovery-app-production-4a32.up.railway.app/api/mcp \
-H "Content-Type: application/json" \
-H "Authorization: Bearer shpg_disc_your_key_here" \
-d '{
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"name": "search_products",
"arguments": { "query": "wireless headphones", "maxPrice": 100 }
},
"id": 1
}'
Security
- API keys are stored as SHA-256 hashes
- Rate limiting prevents abuse (60/min public, 300/min authenticated)
- All requests are logged for audit
- Keys can be revoked at any time