Field-by-field comparison

Compare the evidence before choosing an MCP.

Each signal stays separate, missing facts remain visible, and the column order follows your selection.

MCPs in this comparison

Uncheck an MCP to remove it. Comparing two or three keeps each signal in its own row.

Open canonical comparison link

Comparable alternatives

Shown only when capability or industry context overlaps.

Side-by-side MCP evidence comparison
Evidence fieldShopify Storefront MCPMCP100 RecommendedPlaywright MCPMCP100 Recommended
Task fit
Best for
  • Searching and comparing products from a specific Shopify storefront
  • Answering store policy and FAQ questions
  • Using UCP Cart MCP for cart workflows before checkout.
  • Inspecting and testing web interfaces through accessibility snapshots
  • Reproducing browser journeys in a dedicated test profile
Not ideal for
  • Merchant administration, inventory editing, or back-office order management
  • Cross-store catalog aggregation without separate store endpoints
  • API-only testing that does not need a browser
  • Unattended access to a personal browsing profile
Avoid when
  • The agent can finalize purchases without explicit shopper review
  • The selected store restricts MCP access or its policies prohibit the intended use
  • Untrusted product or policy content can trigger unrelated privileged tools
  • The workflow cannot permit an agent to navigate, type, click, upload files, or read page content
  • You cannot isolate sensitive authenticated sessions from the agent-controlled browser
Provenance
Provenance details

First-party MCP

Shopify · Publisher source ↗

First-party MCP

Microsoft · Publisher source ↗

Maintenance
Maintenance details

Repo: Not documented

Package: Not documented

Repo: Sep 18, 2026

Package: Sep 21, 2026

Popularity evidence
GitHub starsNot documented

37,525

GitHub stars · checked 2026-09-24T04:14:16.452000Z

Package downloads / 30 daysNo reliable download data

23,800,747

package downloads / 30 days · checked 2026-09-24T04:17:39.045000Z

Client coverage
Client coverage details
Claude Code✓ Streamable HTTP
Claude Desktop✓ Streamable HTTP
Codex✓ Streamable HTTP
VS Code✓ Streamable HTTP
Cursor✓ Streamable HTTP
OpenCode✓ Streamable HTTP
Claude Code✓ Local stdio
Claude Desktop✓ Local stdio
Codex✓ Local stdio
VS Code✓ Local stdio
Cursor✓ Local stdio
OpenCode✓ Local stdio
Client coverage noteLocal stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server.
Access and data
AuthenticationShopify documents no authentication requirement for the Storefront MCP endpoint. Some stores may restrict access. UCP catalog requests include an agent-profile reference.The server itself does not require a service account for local stdio use, but websites opened in the controlled browser may use cookies or other authenticated browser state.
CostShopify documents no separate Storefront MCP fee. Merchant Shopify plan, application hosting, model, and client costs remain applicable.The first-party open-source package lists no MCP server usage fee. Normal internet, hosted-client, proxy, or third-party website costs can still apply.
PermissionsThe Storefront MCP exposes catalog and storefront policy/FAQ search, and the UCP Cart MCP endpoint supports cart mutations. This intentionally unauthenticated storefront path does not grant Shopify Admin API or merchant-administration authority.The exposed tools can navigate pages, interact with elements, enter text, upload files, inspect network activity, and optionally use additional browser capabilities.
Data handlingRequests go to the selected merchant's Shopify-hosted endpoint. Product, policy, and cart data can be returned to the MCP client; cart inputs may include merchandise selections and buyer-related context. Treat all storefront text as untrusted content.Page text, accessibility snapshots, console output, network details, uploaded paths, and browser state may be returned to the connected MCP client. Isolated mode keeps the temporary profile in memory; persistent mode stores browser state on disk.
Limitations
Tradeoffs
  • The standard Storefront endpoint requires no authentication, simplifying access but making store content an untrusted external input.
  • Catalog UCP tools use a separate `/api/ucp/mcp` endpoint and require an agent profile.
  • Storefront cart tools were maintained only through 2026-08-31; use UCP Cart MCP for cart workflows.
  • A persistent profile is convenient but can retain cookies and authenticated state between sessions.
  • Origin allow/block options reduce accidental access but the publisher explicitly says they are not a security boundary.
Risk contextKeep the agent limited to catalog, policy, and cart tools; display price, quantity, merchant, shipping, and return details before checkout; and never imply MCP100 execution testing. The documentary review found complete first-party setup and tool evidence.Playwright MCP is not a security boundary. Secret replacement or masking is a convenience feature, not a security boundary. Prefer an isolated browser profile, non-sensitive test accounts, narrow destinations, minimal optional permissions, and client-side approval controls.
Evidence date
Editorial review2026-09-052026-07-24
Candidate evidence2026-09-24T04:25:05.554391Z2026-09-24T04:25:05.554391Z

Popularity, maintenance, fit, permissions, and client support are independent evidence fields.

Read the evidence method →