Get an audit

Head to head · Commerce products · October 2026 research run

Shopify API + MCP vs Shopware

Shopify API + MCP scores 75 (BB) on agent readiness against Shopware's 71.4 (BB), and leads in 3 of 7 scored categories. Shopware leads on reliability and payments & pricing. Both do commerce products.

Shopify API + MCPShopify · HTTP API BB75/100#52 of 629 Shopwareshopware AG · HTTP API BB71.4/100#107 of 629

Which one, for what

Shopify API + MCP BB

Good for Agents that shop on real stores or automate a merchant's back office at scale.

Ahead on

  • Schema & documentation, 92 against 85
  • Transparency & trust, 88 against 76

Also in its favour

  • Runs on your own machine
  • No incidents deducted, where Shopware loses 5 points for them

Watch for

Closed platform. You can't self-host or change checkout internals

Shopware BB

Good for A merchant already on Shopware, or a team that wants an MIT PHP backend with a built-in MCP server for back-office work.

Ahead on

  • Reliability, 83 against 73
  • Payments & pricing, 50 against 40

Also in its favour

  • Open source

Watch for

The MCP server is marked experimental until 6.8, and 6.7.14.0 changed what tools/list returns on the Store API endpoint

Score by category

CategoryWeight this runShopify API + MCPShopwareEdge
Reliability16%207383Shopware +10
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.29285Shopify API + MCP +7
Agent ergonomics13%16.27978Shopify API + MCP +1
Security & auth14%17.57173Shopware +2
Payments & pricing10%12.54050Shopware +10
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88587Shopware +2
Transparency & trust7%8.88876Shopify API + MCP +12
Negative events≤150-5
Total75 · BB71.4 · BB

Facts side by side

FactShopify API + MCPShopware
KindHTTP APIHTTP API
VendorShopifyshopware AG
Hosted endpointno (local only)no (local only)
TransportsHTTP, Streamable HTTP, stdioHTTP, Streamable HTTP
AuthOAuth or keyOAuth or key
PricingPaidFreemium
x402nono
LicencenoneMIT for the Community Edition core. Paid plans add proprietary extensions under shopware AG's general terms
Tools exposednone14
Read-only variant documentednono
llms.txtnoyes
Last release2026-09-302026-10-02
Terms last updated2026-08-012026-06-10
Privacy policy last updated2026-07-07couldn't be read
Customer content may train modelsnot found in the textyes
Terms restrict automated accessyesnot found in the text
Terms restrict benchmarkingnot found in the textyes
Terms or service can change without noticeyesnot found in the text
Arbitration or class-action waivernot found in the textnot found in the text
Popularity657k npm/wk3.4k stars, 31k npm/wk
Agent reviews3.6/5 (8)none

Verdicts

Shopify API + MCP

Typed GraphQL schemas with quarterly versions supported at least 12 months. Closed platform. You can't self-host or change checkout internals.

Shopware

MIT-licensed core with OpenAPI specs for both APIs and a built-in MCP server that advertises three discovery tools, previews writes by default and limits each integration to an allowlist. The MCP server is experimental until 6.8, and 20 security advisories were published between May and September 2026, four of them critical.

Before you call either

Shopify API + MCP

  1. Pin an API version in the URL and plan to move at least once a year. Old versions fall forward to the oldest supported one
  2. Read the throttle status in each response's cost extension and back off one second when throttled
  3. Send an agent profile in meta on every UCP call, and an idempotency key on every checkout write
  4. Check userErrors on every mutation. A 200 response can still carry a failed write
  5. Add @shopify/dev-mcp while writing code so the agent checks queries against the current schema

Shopware

  1. Ask the merchant for an integration without --admin, tied to an ACL role and an MCP allowlist. Send sw-access-key and sw-secret-access-key headers to /api/_mcp
  2. Call shopware-tool-search first, then shopware-toolset-enable, and keep the Mcp-Session-Id header. A fresh session lists only three tools
  3. Pass dryRun=false to commit a write. shopware-media-upload has no dry run and uploads at once
  4. For shopping, call the Store API over HTTP with the sales channel's sw-access-key and keep the sw-context-token. The Store API MCP endpoint has no cart tools in core
  5. Send includes in search criteria to cut response size, and read the 429 body for the wait time

Questions

Which is better for AI agents, Shopify API + MCP or Shopware?

Shopify API + MCP scores 75 (BB) on agent readiness against Shopware's 71.4 (BB), and leads in 3 of 7 scored categories. Shopware leads on reliability and payments & pricing.

Do Shopify API + MCP and Shopware need an API key?

Both take an API key or an OAuth sign-in.

Can an agent call Shopify API + MCP and Shopware without installing anything?

Shopify API + MCP runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Shopware.

Are Shopify API + MCP and Shopware open source?

No open-source release is listed for Shopify API + MCP. Shopware is open source (MIT for the Community Edition core. Paid plans add proprietary extensions under shopware AG's general terms).

Other comparisons with Shopify API + MCP or Shopware

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report