AI & Agentic Commerce

Shopify WebMCP Tools: What AI Agents Can Do on Your Storefront

By CartStack Team4 min read

Shopify WebMCP tools have been live since August 2026 on every Liquid storefront. An AI agent in the shopper’s browser can call them to search the catalog, manage the cart and move to checkout. There is nothing to install. This guide lists the tools, explains how they act on the shopper’s live session, and ends with our view on what to check in your theme and your content. Checked against Shopify’s developer changelog and WebMCP documentation in October 2026.

Cover graphic for Shopify WebMCP storefront tools
The agent calls named tools instead of simulating clicks.

What Shopify WebMCP Is

Without tools, an agent that helps a shopper has to read your page’s code and simulate clicks, which Shopify calls slow and error-prone. WebMCP is a proposed web standard where the page registers tools with the browser. The agent calls them with structured inputs and gets structured data back. Shopify’s August 5 announcement says the tools are live on every Liquid storefront and on the Hydrogen developer preview, with no configuration. Shopify is helping shape the specification alongside Google and Microsoft.

This is separate from the server-side route in our UCP guide. WebMCP serves agents that shoppers bring to your store in their browser. UCP and Shopify’s MCP servers serve agents that run elsewhere and connect to Shopify directly.

Shopify WebMCP Tools an Agent Can Call

  • Catalog: search_catalog searches products, collections, articles and pages. browse_store lists collections or the products in one. get_product returns variants, prices and which option combinations are in stock. show_variant takes the shopper to a product page with a variant selected.
  • Cart: get_cart reads line items and totals. update_cart adds items, changes quantities or removes them, and returns options to clarify when a request is ambiguous instead of changing the cart. cancel_cart empties it.
  • Checkout and orders: proceed_to_checkout takes the shopper to checkout after verifying the cart is not empty. manage_orders opens the order history page, and asks the shopper to log in first if needed.
  • Store information: search_shop_policies_and_faqs answers questions about returns, shipping and hours from the store’s own content.

How the Tools Act on the Session

Everything happens in the tab the shopper is looking at. Catalog tools read data through the Storefront API. Cart tools call the standard storefront actions on Shopify.actions, the same functions apps use, so an agent’s cart change behaves like the shopper’s own. If your theme configured the standard action for cart updates, for example to open a cart drawer, agents trigger that behavior too.

After proceed_to_checkout, eligible checkouts replace the storefront tools with checkout tools, and the tool list changes. We cover that part in Shopify Checkout WebMCP.

Limits of Shopify WebMCP

  • WebMCP is still an emerging standard.
  • Agent support is currently limited to Chromium-based browsers through an origin trial.
  • The tools serve the storefront. Checkout registers its own tools.

Our Analysis: What to Check Now

Do not expect traffic yet. With support limited to an origin trial in Chromium browsers, this is early. The cost of being ready is low because nothing needs installing, so treat the work below as hygiene, not a project.

Product data is now an interface. get_product returns variants, prices and which option combinations are in stock. If your variant titles, options or inventory are messy, an agent sees the mess. The cleanup in our catalog readiness guide applies here too.

Your policy pages are an answer source. search_shop_policies_and_faqs answers from your store’s content. Out-of-date shipping or returns pages become out-of-date answers. Review them.

Test your cart behavior as an agent would trigger it. Agent cart updates run through the same standard actions as apps. If your theme updates the cart with custom code that bypasses them, the cart drawer or counter may not react the way you expect. This is our inference from Shopify’s description, so test it on a development store before assuming either way.

Treat text as untrusted. Shopify’s checkout documentation warns agents that merchant and third-party text in tool responses can contain prompt-injection attempts. As a store owner, keep instruction-like wording out of product copy, and review what review and Q&A apps publish on product pages.

Do not go headless for this. Liquid stores already have the tools. That matches the advice in Hydrogen vs Liquid.

FAQ about Shopify WebMCP

Do I need to install an app? No. Shopify says the tools are live on every Liquid storefront with nothing to install or configure.

Which agents can use them? Agents that support WebMCP. Support is currently limited to Chromium-based browsers through an origin trial.

Is WebMCP the same as UCP? No. WebMCP runs in the shopper’s browser. UCP and MCP servers are for agents that connect to Shopify from outside the page.