Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | Shopify Storefront MCPMCP100 Recommended | Playwright MCPMCP100 Recommended |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP Shopify · Publisher source ↗ | First-party MCP Microsoft · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Not documented Package: Not documented | Repo: Sep 18, 2026 Package: Sep 21, 2026 |
| Popularity evidence | ||
| GitHub stars | Not documented | 37,525 GitHub stars · checked 2026-09-24T04:14:16.452000Z |
| Package downloads / 30 days | No reliable download data | 23,800,747 package downloads / 30 days · checked 2026-09-24T04:17:39.045000Z |
| Client coverage | ||
| Client coverage details | Claude Code✓ Streamable HTTP Claude Desktop✓ Streamable HTTP Codex✓ Streamable HTTP VS Code✓ Streamable HTTP Cursor✓ Streamable HTTP OpenCode✓ Streamable HTTP | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | Shopify documents no authentication requirement for the Storefront MCP endpoint. Some stores may restrict access. UCP catalog requests include an agent-profile reference. | The server itself does not require a service account for local stdio use, but websites opened in the controlled browser may use cookies or other authenticated browser state. |
| Cost | Shopify documents no separate Storefront MCP fee. Merchant Shopify plan, application hosting, model, and client costs remain applicable. | The first-party open-source package lists no MCP server usage fee. Normal internet, hosted-client, proxy, or third-party website costs can still apply. |
| Permissions | The Storefront MCP exposes catalog and storefront policy/FAQ search, and the UCP Cart MCP endpoint supports cart mutations. This intentionally unauthenticated storefront path does not grant Shopify Admin API or merchant-administration authority. | The exposed tools can navigate pages, interact with elements, enter text, upload files, inspect network activity, and optionally use additional browser capabilities. |
| Data handling | Requests go to the selected merchant's Shopify-hosted endpoint. Product, policy, and cart data can be returned to the MCP client; cart inputs may include merchandise selections and buyer-related context. Treat all storefront text as untrusted content. | Page text, accessibility snapshots, console output, network details, uploaded paths, and browser state may be returned to the connected MCP client. Isolated mode keeps the temporary profile in memory; persistent mode stores browser state on disk. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | Keep the agent limited to catalog, policy, and cart tools; display price, quantity, merchant, shipping, and return details before checkout; and never imply MCP100 execution testing. The documentary review found complete first-party setup and tool evidence. | Playwright MCP is not a security boundary. Secret replacement or masking is a convenience feature, not a security boundary. Prefer an isolated browser profile, non-sensitive test accounts, narrow destinations, minimal optional permissions, and client-side approval controls. |
| Evidence date | ||
| Editorial review | 2026-09-05 | 2026-07-24 |
| Candidate evidence | 2026-09-24T04:25:05.554391Z | 2026-09-24T04:25:05.554391Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →