Skip to main content

Weaverse MCP

The Weaverse MCP server connects AI tools (Cursor, Claude, Codex, and any other Model Context Protocol client) to Weaverse. It does two things:
  1. Docs — search the Weaverse documentation and knowledge base.
  2. Your account — read your own Weaverse projects, pages, theme settings, and locales over the Content API, scoped to your shop.
Docs search is public. The account tools require an API key and only ever see the shop that key belongs to.

Two ways to connect

@weaverse/mcp (recommended)

The canonical server. Runs locally via npx, reads your API key from its config, and exposes both the docs tools and the authenticated account tools. Use this when you want your agent to work with your projects.

Hosted docs MCP

https://docs.weaverse.io/mcp — a zero-install, HTTP-only server that exposes docs search only. Good when all you need is documentation lookup. No account access.
Both surfaces search the same documentation. @weaverse/mcp proxies that same docs search and adds account tools on top, so it is a strict superset of the hosted docs MCP.

Install & configure @weaverse/mcp

Add the server to your MCP client. Pass your API key (optional — omit it for docs-only use) via the env block.
Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per-project):
Leave WEAVERSE_API_KEY out to run docs-only — search_weaverse_docs still works. Existing installs that only search docs keep working unchanged.
Using another MCP-compatible client — pi, Gemini CLI, or anything else that speaks MCP? Point it at npx -y @weaverse/mcp and put WEAVERSE_API_KEY in the server’s environment.

Authentication

The server forwards WEAVERSE_API_KEY to the Content API as Authorization: Bearer <key>. It never validates or stores the token itself — the Content API enforces shop scoping and scopes. An account tool called without a valid, sufficiently-scoped key returns a clear auth error, never data.
1

Get a key

Today: create a Content API key in Weaverse Dashboard → Settings → API Keys.Coming soon: your agent can obtain a scoped, expiring agent_cli token via the device handshake — the agent starts the flow, you approve it once in Builder, and the agent stores the key.
2

Add it to your MCP config

Put it in the env block as shown above.
3

Confirm

Ask your agent to run whoami. It returns the projects the key can access (and its shop id + scopes once the handshake ships).

Scopes & shop isolation

Account tools map to Content API scopes (content:read for the read tools). Each key is scoped to a single Weaverse shop — requests can only touch that shop’s projects, and reaching across shops returns a 403-style error. Tokens are revocable any time from Settings → Connected agents / API keys in Builder.

Available tools

Docs (public — no API key)

search_weaverse_docs

Search the Weaverse knowledge base for features, schema/input settings, SDK hooks, theme settings, and implementation guides. Returns titles, direct links, and content. Also registered as search_docs.Backed by the official Weaverse documentation MCP (hosted by Mintlify) — the knowledge base, ranking, and freshness all live upstream.

Account (requires WEAVERSE_API_KEY)

Account tools require @weaverse/mcp v2.2.0 or later; write tools require v2.3.0 or later (the unified server, shipped with this release). Documentation search works on every version. Because npx -y @weaverse/mcp always fetches the latest, a fresh install gets the account tools automatically; pin or upgrade if you installed an older version.
get_page returns Portable Text by default — structured JSON that is far easier for an LLM to reason over than raw HTML strings.

Content writes & safety

Write tools change the live storefront immediately — edits propagate through the same cache-invalidation path as a Studio save. Read the current value first (get_page, get_theme_settings), send only the keys you mean to change, and remember nested objects are replaced wholesale.
Write scope is deliberately narrow:
  • Page content — merge item data, create items, relink children (update_page), and soft-delete pages (delete_pages).
  • Theme settings — top-level key merges only; a restorable theme version is snapshotted before every change (update_theme_settings).
  • Project — name only (update_project).
Account-level operations are never exposed via MCP — creating or deleting projects, billing, team/members, plan changes, and store linkage stay human-only in Weaverse Builder.

How docs search relates to docs.weaverse.io/mcp

https://docs.weaverse.io/mcp is the Mintlify-hosted, docs-only MCP (it resolves to https://weaverse.io/docs/mcp). @weaverse/mcp proxies that exact docs search and layers the account tools on top. Pick the hosted URL for a zero-install docs lookup; pick @weaverse/mcp when you want your agent to work with your projects.

Content API

The REST API the account tools wrap — reads and writes. The MCP is its agent-native front end.

Shopify Hydrogen Skills

Agent skills for building Weaverse + Hydrogen storefronts. After setup, the same key powers the account tools here.

Weaverse CLI

Project setup and theme scaffolding.

Weaverse SDKs

Build custom components for Weaverse Hydrogen themes.

Troubleshooting

  • Confirm WEAVERSE_API_KEY is set in the server’s env block.
  • Verify the key in Weaverse Dashboard → Settings → API Keys (not revoked).
  • Docs tools work without a key; only the account tools need one.
  • The key is scoped to one shop. You can only access that shop’s projects.
  • Use list_projects / whoami to see exactly what the key can reach.
  • Ensure Node.js is installed and npx -y @weaverse/mcp can run.
  • Restart your AI tool after editing its MCP config.
  • The server logs a startup line to stderr noting whether account tools are enabled.
  • Be specific and use Weaverse terms (e.g. createSchema, WeaverseRoot, “input settings”).
  • Docs search requires network access to the hosted documentation MCP.