How to Connect Shopify to Grok with MCP?

Before you start

You'll need a SourcetoMCP account with at least one brand created, a Shopify store, and permission to create an app in the Shopify Dev Dashboard under the same organisation as the store, plus a Grok account. Custom connectors on grok.com need a SuperGrok plan, either standalone or through X Premium+. On a Grok Business or Enterprise seat, a team admin provisions the connector instead, see the note in the next section.

Connect Shopify to SourcetoMCP

1. 1In the Shopify Dev Dashboard (dev.shopify.com), create an app in the same organisation as your store.
2. 2For reporting alone, give the app seven read scopes: read_orders, read_products, read_customers, read_inventory, read_locations, read_markets and read_reports. Editing is a second decision. Add write_products, write_orders or another write scope for each area you want Grok to change, and add read_all_orders if you need orders past 60 days.
3. 3Release a version of the app, then install it on your store. Copy the client ID and client secret from the app's settings.
4. 4From your SourcetoMCP dashboard, go to Connectors → Add a connection and find the Shopify card.
5. 5Enter your your-store.myshopify.com address (your custom domain will not work), choose Dev Dashboard app, and paste the client ID and client secret. SourcetoMCP verifies them against your store.
6. 6Confirm the store on the next screen. It then appears on your Connections page.

Nothing needs approving on this screen, since the connection uses your app's client ID and secret. If your store already has an older custom app, its Admin API access token works too, but Shopify no longer lets merchants create new ones. The app and the store have to sit in the same Shopify organisation for client credentials to work.

Add SourcetoMCP as a custom connector in Grok

1. 1In SourcetoMCP, open Connect an agent from the dashboard sidebar and copy your server address (it looks like https://sourcetomcp.com/api/mcp).
2. 2Go to grok.com/connectors and select New Connector.
3. 3Choose Custom.
4. 4Paste in your server address and complete the authentication step so Grok can reach it. SourcetoMCP runs its own OAuth, so there is no client ID or secret to enter.
5. 5Approve access when Grok asks for it, the same as you would for any other connector.

On a Business or Enterprise plan, a team admin adds the connector first, from console.x.ai's Grok Business → Connectors, choosing Add Connector, then Other, and pasting the same server address. Once it's provisioned, each team member opens grok.com/connectors themselves and signs in with their own SourcetoMCP account, so a person only ever reaches the sources their own account can see.

Once approved, the connection appears under Active connections on the Connect an agent page in SourcetoMCP, so you can see exactly what has access at any time.

Ask Grok about your Shopify store

Once it's added, SourcetoMCP is available to Grok in any conversation, there is no separate toggle to switch on per chat. Grok discovers the tools the server exposes and calls them the same way it uses any of its built-in connectors.

With both pieces connected, Grok can report on your best sales days and repeat customers, check gift cards and unpaid orders, and adjust stock if you ask. Try something like:

1. 1What was my best sales day in the last month?
2. 2Which customers have placed more than one order?
3. 3Which gift cards still have a balance?
4. 4Which orders were placed today and are not yet paid?
5. 5Set the Linen Shirt in size M to 40 at the Melbourne location after the stocktake.

The first four are read-only reports. The last one changes your store. See the note below on how SourcetoMCP handles those.

How this differs from Shopify's own Grok connector

Shopify's help page for its connector for Grok, read on 17 October 2026, states three limits: orders and customers are read only, discount codes are percentage-off only, and refunds, cancellations, order capture and returns are not supported.

SourcetoMCP covers those actions. It edits orders, creates refunds and returns, and creates four discount types (percentage, fixed amount, buy X get Y and free shipping), all on one connection shared with your ad and analytics accounts. Compare the two on the Shopify MCP server page, and recheck Shopify's page since it can change.

A note on write actions

Each SourcetoMCP operation has its own daily limit: 200 reads, or 20 writes and deletes. Writes and deletes sit behind separate tools from reads, so a client can ask before running one. Products are created as drafts, customers are emailed only on request, and refunds and deletes cannot be undone from here, so check what Grok proposes before you confirm it. The scopes on your Shopify app decide which changes are allowed at all.

Troubleshooting

Shopify rejects the client ID and secret: the app has to be installed on this store and sit in the same Shopify organisation as it, and the pair has to be copied exactly. Shopify's answer is the same whichever of those is wrong.

A change fails and names a missing scope: add that scope to your app in the Dev Dashboard, release a new version, install it on the store and ask again.

Orders older than 60 days are missing: add read_all_orders to the app, then release and install the new version. Without it Shopify returns the last 60 days only.

New Connector → Custom isn't available on grok.com: custom connectors need a SuperGrok plan on an individual account. On a Business or Enterprise seat, a team admin has to provision the connector first from console.x.ai before it shows up for anyone else.

Grok says it can't find the tool or has no data: check the connector still shows in grok.com/connectors. If it does, confirm the connection still shows under Active connections in SourcetoMCP, then remove and re-add it to trigger a fresh approval.

Revoking access

You can disconnect from either side. In SourcetoMCP, remove the store from your Connections page, or revoke Grok's access entirely from the Connect an agent page. In Grok, open grok.com/connectors and remove it. On Business and Enterprise, a team admin removes it for everyone from console.x.ai. To cut off SourcetoMCP's access to your store itself, uninstall the app in Shopify.

Still stuck?

Reach us at [email protected].