Security ScoreF
0
out of 100
Vulnerabilities Found
8
Crit
5
High
0
Medi
0
Low
0
Info
Last scanned: 7/13/2026
Quality ScoreC
59
out of 100
62
Maint.
72
Popular
31
Docs
73
Compat
Maintenance62%
Popularity72%
Documentation31%
Compatibility73%
Maintenance62
Unknown
Commit Frequency65%
Release Frequency70%
Issue Response45%
Popularity72
520
Stars
9.2K
Downloads
78
Forks
Stars Score76%
Downloads Score71%
Forks Score66%
Documentation31
README Quality35%
Available Documentation
API DocsExamplesChangelog
Compatibility73
MCP Spec Compliance80%
Transport Support50%
Features
TypeScript
Supported Transports
STDIO
Agentic MCP Risk Intelligence
MCPSafe checks risks unique to AI-connected MCP servers — prompt surfaces, model-controlled tools, credentials, filesystems, and network reachability.
3
agentic findings
Severe agentic exposure
Multiple MCP-native exploit paths were detected. Review before connecting this server to an AI client.
Prompt Injection Surface
0
Tool metadata can steer or hijack AI clients before a user invokes the tool.
AI → Command Execution
0
Model-selected tool arguments can reach shell/process execution.
Secret Exfiltration Path
0
Tool context combines credential access with outbound network capability.
Unbounded Filesystem
0
AI-controlled paths may access files outside the intended workspace.
Agent SSRF
3
AI-controlled URLs may reach local, metadata, or internal network services.
Vulnerabilities(13)
8Critical
5High
Filter:
READMEShopify MCP Server
View sourceShopify MCP
E-commerce for AI assistants.
Embed Security Badge
Add this badge to your README or documentation
[](https://mcpsafe.org/registry/shopify-mcp-server)Need more customization options?Badge Documentation
Server Information
- Source
- GITHUB
- Package
- mcp-server-shopify
- Version
- 1.0.2
- Language
- typescript
- License
- ISC
- Transport
- STDIO
- Added
- Jan 20, 2026
- Updated
- Jul 13, 2026