Skip to main content
With the Model Context Protocol (MCP), you can connect an AI application to the admin interface of your shop. The AI agent can then perform functions of the admin interface for you, for example retrieving orders or reading product data. You decide which functions these are yourself when logging in. Only two steps are required for the connection: First, you enter the address of the shop in your AI application. Then you log in to the admin interface with your user account. Nothing needs to be set up in the shop itself. Your AI application only needs to be able to connect the MCP server via an address (URL) and support login via OAuth. The following sections first describe how the agent’s access is controlled and then the connection step by step.

​
How the agent’s access is controlled

An AI agent does not receive its own user account. It always works on behalf of the user account with which you confirm the connection. Two limits apply:
  • The agent only receives the permissions that you grant during login. These are the same permissions that also apply to user accounts in the admin interface.
  • You can only grant permissions that your own user account has.
The agent only sees the functions for which it has a permission. If, for example, you only grant read permissions for orders, the agent can retrieve orders but cannot change or delete them. Writing functions are then not offered to it at all. The AI application never gets to see your credentials. The login takes place in the admin interface, and the application then receives an access key with the granted permissions.
Everything the agent changes in the shop happens on behalf of your user account. Therefore, only grant write and delete permissions if the agent actually needs them for its task.

​
Connecting AI agents

​
Step 1: Add the server in the AI application

Add a new MCP server in your AI application. Depending on the application, the corresponding function is called, for example, “Add connector” or “Add MCP server”. Enter the following address there:
Replace www.<your-shop>.de with the domain of your shop. You do not need to enter an API key, a client ID, or a password. You can freely choose the name of the server in the application.

​
Step 2: Log in to the admin interface

When the connection is established for the first time, the AI application opens a browser window with the admin interface. If you have not yet logged in there, log in with your user account. The “Authorize access” page then appears with the question “Do you want to grant <application> access to the admin interface?”. Under “Application” you can see which AI application is requesting access. Check this information before you continue.

​
Step 3: Select permissions

Under Permissions, the permissions of your user account are listed, grouped by area. Select the permissions that the agent should receive.
  • If the AI application has requested specific permissions, these are already preselected. You can change the selection.
  • Permissions that your user account does not have are not available for selection.
If your user account is an administrator account, full access is already preselected. This gives the agent all permissions of your account. If the agent should only work with restrictions, deselect full access and select the required permissions individually. Only administrators can grant full access.

​
Step 4: Confirm access

Click “Authorize” to grant access with the selected permissions. The browser then redirects you back to the AI application. The connection is now established. With “Deny” you cancel the process, and the application then does not receive access. The request on the “Authorize access” page is valid for 10 minutes. Confirm it within this time.

​
If something does not work