# commercetools (slim)

> Headless commerce platform from commercetools GmbH in Munich, with HTTP and GraphQL APIs for catalogue, carts, checkout, orders and customers. Agents reach it through the API, four SDKs or a managed MCP server per project.

- Full: https://www.anchorterminal.com/tools/commercetools.md (~8,300 tokens) · this version ~2,130 tokens · JSON https://www.anchorterminal.com/tools/commercetools.json · canonical https://www.anchorterminal.com/tools/commercetools
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-08

**BB · 71.3/100 · rank #116 of 722 · #4 in Commerce & checkout · agent-ready · confidence medium**


Assessment: A public OpenAPI file with 822 operations, per-resource OAuth scopes and a managed MCP server whose tools an administrator selects per agent. Prices are quoted by sales only, and the HTTP API publishes no platform-wide rate limit. A 60-day trial needs no card.

## Facts

- Kind: HTTP API · vendor: commercetools GmbH · category: Commerce & checkout · legal entity: commercetools GmbH · provenance 86/100
- Endpoint: `https://api.{region}.commercetools.com/{projectKey}` (HTTP, Streamable HTTP, stdio)
- Auth: OAuth · pricing: Paid · x402: no · licence: Proprietary service under the commercetools Master Service Agreement. The API specifications are public, the SDKs are MIT (TypeScript, PHP) or Apache 2.0 (Java, .NET) and Commerce MCP is MIT
- Probe metrics: not measured yet (probes haven't run)
- APIs: HTTP API (OpenAPI 3.0, 822 operations) and GraphQL API on https://api.{region}.commercetools.com/{projectKey}, plus Import, Audit Log (Change History) and Checkout APIs
- Regions: North America (Google Cloud, AWS), Europe (Google Cloud, AWS) and Australia (Google Cloud). Each has its own api, auth and mcp host
- Managed MCP server: Hosted Commerce MCP at https://mcp.{region}.commercetools.com/projects/{projectKey}/{mcpServerKey}. Up to 500 servers a project and 1,000,000 tool calls a project a month. Tools chosen per server, with field filtering and overridable tool descriptions. Pinned by major version (v4)
- MCP tools: 122 tool names in the docs, in a create, read, update pattern per resource (products, carts, orders, customers, discounts, inventory, payments and more), with `all` and `read_all` sets. Titles and readOnlyHint, destructiveHint and openWorldHint annotations since 1 October 2026
- Self-hosted MCP: @commercetools/commerce-mcp 4.2.2 on npm (MIT, Node.js 20 or later), stdio or Streamable HTTP. Above 30 enabled tools it exposes list_available_tools, inject_tools and execute_tool instead of every tool
- Knowledge MCP: https://docs.commercetools.com/apis/mcp, free and without a project. Docs search, OpenAPI and GraphQL schema lookup, and request validation. 100 requests per 15 minutes per IP, with Retry-After on 429
- Credentials: OAuth 2.0 API Clients with view and manage scopes per resource and per store. Tokens last 48 hours by default and can be revoked at /oauth/token/revoke. Tokens are not accepted as URL parameters
- Rate limits: No platform-wide limit documented for the HTTP API. Queries return at most 500 results with offset up to 10,000, 500 update actions a request, a 14 MB request body, and GraphQL complexity under 20,000
- Retries: Retry 502 and 503 with exponential backoff from 200 ms and honour Retry-After. Updates and deletes need the resource `version`, and a mismatch returns 409 ConcurrentModification. No idempotency keys
- SLA: 99.9 per cent monthly availability, with credits of 10, 25 or 50 per cent. Managed MCP Servers, AI Hub, Platform Insights, beta functions and trial projects are excluded
- SDKs: Java (Apache 2.0), TypeScript (MIT), PHP (MIT) and .NET (Apache 2.0), generated from the API specifications and released on the first Monday of each month. @commercetools/platform-sdk 9.6.0 on 5 October 2026
- Audit: Audit Log Basic records Merchant Centre changes. Audit Log Premium (add-on) records changes from every source. Platform Insights (add-on) tracks MCP server usage
- Change policy: Versionless APIs with continuous delivery. Breaking changes announced three months ahead and removals six months ahead in release notes
- Certifications: SOC 2, ISO/IEC 27001 and Cyber Essentials per the security page, with audit reports under NDA. HIPAA and HDS hosting as add-ons
- Status: status.commercetools.com, seven components (APIs, Merchant Centre, three Frontend components, Connect, Checkout) across five regions
- Sub-processors: List updated 24 August 2026. Google Cloud and AWS for hosting in the customer's chosen region, MongoDB Atlas, CrowdStrike for logs in Belgium, Atlassian for support tickets, and Google, AWS and Langfuse for optional AI functions

- Scores: Reliability 73, Performance pending, Schema & documentation 86, Agent ergonomics 83, Security & auth 70, Payments & pricing 20, Task success pending, Maintenance & community 85, Transparency & trust 81 · total over the 7 assessed categories
- Why: Reliability, Graded on the HTTP API with the hosted lines. · Schema & documentation, OpenAPI 3.0 file of 3.1 MB with 822 operations in commercetools/commercetools-api-reference, updated on 7 October 2026, with RAML and a Grap… · Agent ergonomics, REST queries take limit, offset, sort, where predicates and reference expansion, and GraphQL selects fields. · Security & auth, OAuth 2.0 client credentials through API Clients with view and manage scopes per resource and per store, tokens that last 48 hours by defaul… · Payments & pricing, No x402, MPP or L402 in the docs or pricing page (0). · Maintenance & community, Release notes dated 7 October 2026 (30). · Transparency & trust, Closed service under a public Master Service Agreement and a public 60-day trial agreement.
- Sources: 31, open questions: 7, both in the full twin
- Capabilities: commerce.products, commerce.cart, commerce.checkout, commerce.orders, commerce.headless
- JSON: https://www.anchorterminal.com/api/v1/tools/commercetools.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/commercetools.svg` or a link to https://www.anchorterminal.com/tools/commercetools from a page on commercetools.com or one of its subdomains, or the README of github.com/commercetools/commercetools-api-reference, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Use the auth and API hosts for the project's region, such as auth.europe-west1.gcp.commercetools.com and api.europe-west1.gcp.commercetools.com. There are five regions
2. Send the resource's current `version` with every update or delete. On 409 ConcurrentModification, re-read the resource and retry only if the change is still needed
3. Retry 502 and 503 with exponential backoff from 200 ms, honour Retry-After, and check Content-Type before parsing an error body
4. For MCP, ask for an API Client scoped to `mcp:{projectKey}:{mcpServerKey}` and a server limited to the tools the task needs, not `all`
5. Keep page size at or under 500 and offset at or under 10,000. Product Search returns at most 100 per request

## Connect

```bash
npm install @commercetools/platform-sdk
```

```bash
curl https://{auth_host}/oauth/token -X POST \
  --basic --user "{clientId}:{clientSecret}" \
  -d "grant_type=client_credentials&scope=manage_project:{projectKey}"
curl https://api.{region}.commercetools.com/{projectKey}/ \
  -X GET \
  -H "Authorization: Bearer ${BEARER_TOKEN}"
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/commercetools

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Shopify API + MCP | BB | 75 | commerce.products, commerce.cart, commerce.checkout, commerce.orders, commerce.headless | https://www.anchorterminal.com/tools/shopify.min.md |
| WooCommerce API + MCP | BB | 72.9 | commerce.products, commerce.cart, commerce.checkout, commerce.orders, commerce.headless | https://www.anchorterminal.com/tools/woocommerce.min.md |
| Shopware | BB | 71.4 | commerce.products, commerce.cart, commerce.checkout, commerce.orders, commerce.headless | https://www.anchorterminal.com/tools/shopware.min.md |
| Vendure | BB | 70.9 | commerce.products, commerce.cart, commerce.checkout, commerce.orders, commerce.headless | https://www.anchorterminal.com/tools/vendure.min.md |
| Square | B | 69.2 | commerce.products, commerce.orders, commerce.checkout, commerce.cart, commerce.headless | https://www.anchorterminal.com/tools/square.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)