Skip to content

Latest commit

 

History

History
62 lines (43 loc) · 2.2 KB

codex.md

File metadata and controls

62 lines (43 loc) · 2.2 KB

Codex CLI

Status: configuration documented.

Configure

~/.codex/config.toml:

[mcp_servers.shopmanager]
url = "http://localhost:3000/mcp/your-store.myshopify.com"
http_headers = { Authorization = "Bearer <TOKEN>" }

The table key (shopmanager) is the name the server appears under.

Getting a token

Create one in the Connect screen of the admin UI (http://localhost:3000/admin?shop=your-store.myshopify.com). In demo mode (SHOPMANAGER_DEMO=1) the token is the fixed string cp_demo.

Treat it like a password. It grants read access to the connected store.

Checking it works

Ask the assistant:

Inspect my Shopify store and tell me the store name, the active theme and the number of products. Do not make any changes.

If the store name comes back, you are connected. If it does not, ask it to run shopify.auth.doctor, which names the problem and its fix.

Disconnecting

Revoke the token in the Connect screen of the admin UI. That immediately stops this client from reaching the store, without uninstalling the app. To remove Shopify access entirely, uninstall the app in the Shopify admin and revoke the Theme Access password.

Security notes

  • The token grants read access to the connected store. Do not commit it.
  • This build cannot write to Shopify. See the read-only guarantee.
  • Tool output is store content written by other people. Treat it as data, not as instructions to the assistant. See SECURITY.md.

Related

Last verified: September 2026.