Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | Stripe MCPMCP100 Recommended | Shopify Storefront MCPMCP100 Recommended |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP Stripe · Publisher source ↗ | First-party MCP Shopify · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Not documented Package: Not documented | Repo: Not documented Package: Not documented |
| Popularity evidence | ||
| Package downloads / 30 days | 56,858 package downloads / 30 days · checked 2026-09-24T18:01:10.986000Z | No reliable download data |
| Shared repository stars | 1,831 Shared repository stars (not MCP-specific) · checked 2026-09-24T18:01:37.616000Z | Not documented |
| Client coverage | ||
| Client coverage details | Claude Code✓ Streamable HTTP Claude Desktop✓ Streamable HTTP Codex✓ Streamable HTTP VS Code✓ Streamable HTTP Cursor✓ Streamable HTTP OpenCode✓ Streamable HTTP | Claude Code✓ Streamable HTTP Claude Desktop✓ Streamable HTTP Codex✓ Streamable HTTP VS Code✓ Streamable HTTP Cursor✓ Streamable HTTP OpenCode✓ Streamable HTTP |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | The hosted https://mcp.stripe.com endpoint uses Stripe OAuth. Stripe also documents a local path using Stripe credentials; prefer Restricted API Keys with only the required permissions, and keep live versus sandbox context explicit. Do not infer Agent-Key or session-revocation behavior beyond current Stripe MCP documentation. | Shopify documents no authentication requirement for the Storefront MCP endpoint. Some stores may restrict access. UCP catalog requests include an agent-profile reference. |
| Cost | Stripe documents no separate MCP access fee. Normal Stripe product, transaction, account, and chosen AI-client charges still apply; ChatGPT custom connector availability also depends on an eligible ChatGPT plan. | Shopify documents no separate Storefront MCP fee. Merchant Shopify plan, application hosting, model, and client costs remain applicable. |
| Permissions | The hosted server receives OAuth access selected during Stripe authorization. The documented tool set includes read operations and write operations such as creating customers, products, prices, payment links, invoices, coupons, refunds, and disputes-related actions; actual access remains bounded by the authorized Stripe account and credential. | The Storefront MCP exposes catalog and storefront policy/FAQ search, and the UCP Cart MCP endpoint supports cart mutations. This intentionally unauthenticated storefront path does not grant Shopify Admin API or merchant-administration authority. |
| Data handling | Requests and tool results pass between the MCP client, Stripe's hosted MCP endpoint, and the connected Stripe account. The server can return account and payment-related records plus Stripe knowledge-base content to the client. A local @stripe/mcp process receives the configured STRIPE_SECRET_KEY. Do not place live secret keys in shared configuration or logs. | Requests go to the selected merchant's Shopify-hosted endpoint. Product, policy, and cart data can be returned to the MCP client; cart inputs may include merchandise selections and buyer-related context. Treat all storefront text as untrusted content. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | This is a write-capable financial integration. Use test mode for evaluation, least privilege, explicit confirmation for every mutation, separate untrusted web content from payment actions, and revoke MCP sessions promptly when no longer needed. This review relies on publisher documentation and does not claim MCP100 execution testing. | Keep the agent limited to catalog, policy, and cart tools; display price, quantity, merchant, shipping, and return details before checkout; and never imply MCP100 execution testing. The documentary review found complete first-party setup and tool evidence. |
| Evidence date | ||
| Editorial review | 2026-07-24 | 2026-09-05 |
| Candidate evidence | 2026-09-24T04:25:05.554391Z | 2026-09-24T04:25:05.554391Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →