Shopware MCP server: connect AI agents to Shopware from the EU

shopware AG, based in Schöppingen, Germany, makes Shopware 6, an open-source e-commerce platform used by many European retailers and brands. Since version 6.7.11.0 the core ships an MCP server at /api/_mcp for the Admin API and a second one at /store-api/_mcp for shopper-facing agents.

Both use Streamable HTTP. From 6.7.14.0 the server is on by default and offers progressive tool discovery: a small default tool set plus search, so the agent loads only the toolsets it needs. Shopware calls it experimental until 6.8, so tool names may still change.

A merchandising agent can find products without descriptions or images in a category, draft missing texts in German and French, and update them after review. A customer service agent can look up an order by number, read its delivery and payment state, and move it to the next state once a person confirms.

Operations teams can ask for orders stuck in "in progress" for more than three days, or list customers who ordered a recalled product. Developers can inspect system configuration across sales channels while debugging.

Create an integration in Shopware for the agent. For production, do not use the --admin flag; create an ACL role with only the permissions the agent needs and assign it to the integration. You receive an access key ID and a secret access key.

On inference.eu, add the Shopware connector to an agent, enter your shop's /api/_mcp URL and the two integration credentials. They are stored encrypted in the EU and sent as sw-access-key and sw-secret-access-key headers. In the Shopware admin you can also limit which tools the integration may call.

The MCP server runs inside your own Shopware installation, wherever you host it, so shop data does not pass through Shopware's company servers unless you use Shopware's cloud offering. Requests go from the agent straight to your shop.

On inference.eu, the model that reads orders and customer records runs in EU data centres, and your integration credentials are stored encrypted in the EU. Orders contain names, addresses and purchase history, so give agents only the entities their task needs.

Shopware enforces ACL checks on every tool call, applies per-principal rate limits and lets you allowlist tools per integration and per user. Note that MCP resources are not ACL-checked yet, so treat everything in an authenticated session as readable.

On inference.eu you can require a person to approve write calls, such as changing an order state, updating prices or editing system configuration, while product and order lookups run freely. Test in a staging shop first, because the feature is still experimental.