Weaverse MCP
The Weaverse MCP server connects AI tools (Cursor, Claude, Codex, and any other Model Context Protocol client) to Weaverse. It does two things:- Docs — search the Weaverse documentation and knowledge base.
- Your account — read your own Weaverse projects, pages, theme settings, and locales over the Content API, scoped to your shop.
Ways to connect
Hosted connector (Claude, ChatGPT)
https://mcp.weaverse.io/mcp. Nothing to install: add it as a connector and
sign in with your Shopify store. Each store approves its own access.@weaverse/mcp (local)
Runs on your machine via
npx with a Content API key. For Cursor, Claude
Code, Codex, VS Code and other local MCP clients.Docs-only MCP
https://docs.weaverse.io/mcp. Documentation search only, with no store
access.Hosted connector for Claude and ChatGPT
The hosted connector runs the same tools as@weaverse/mcp at
https://mcp.weaverse.io/mcp. It never uses an API key. Each store signs in and
approves access itself, and every request is limited to that store. Every
hosted request needs that sign-in, even documentation search; use the
docs-only MCP if you want docs without connecting a store.
1
Add the connector
- Claude: open Customize → Connectors, add a custom connector, and
enter
https://mcp.weaverse.io/mcp. - ChatGPT: open Plugins, select + → Add custom MCP server, enter
a name and
https://mcp.weaverse.io/mcp, choose OAuth authentication, accept the risk warning, and select Create as a plugin (per OpenAI’s Connect and test your plugin guide). Workspace policies may restrict custom MCP servers.
2
Sign in with your store
You are sent to Weaverse. Sign in with the Shopify account that owns the
store. If you are already signed in to Weaverse, you go straight to the
approval screen.
3
Approve access
The approval screen shows the app asking, your store, and where it sends you
back. Reading your projects, pages and theme settings is always included.
Every other permission the assistant requests is a separate checkbox, off
by default, so leave edit permission unchecked for read-only use. Choose
Approve or Deny.
4
Try a read
Ask “Which Weaverse projects does my store have?” The assistant calls
list_projects and shows only your store’s projects.Permissions
The connector’s tools never use publishing, project-management or translation
permissions. Leave those unchecked if an assistant requests them.
Access tokens last one hour and are renewed automatically while the connection
is active. If the store uninstalls Weaverse, every connection stops working
immediately.
Disconnect
- In the assistant, remove or disconnect the Weaverse connector.
- In Weaverse, open Dashboard → Account → Connected AI apps and choose Disconnect. Access is revoked on the very next request. To use the connector again, connect and approve again.
Both surfaces search the same documentation.
@weaverse/mcp proxies that same
docs search and adds account tools on top, so it is a strict superset of the
hosted docs MCP.Install & configure @weaverse/mcp (local)
Add the server to your MCP client. Pass your API key (optional — omit it for
docs-only use) via the env block.
- Cursor
- Claude Desktop
- Claude Code
- opencode
- Codex
- VS Code
Add to
~/.cursor/mcp.json (global) or .cursor/mcp.json (per-project):Leave
WEAVERSE_API_KEY out to run docs-only — search_weaverse_docs still
works. Existing installs that only search docs keep working unchanged.Using another MCP-compatible client — pi, Gemini CLI, or anything else that
speaks MCP? Point it at
npx -y @weaverse/mcp and put WEAVERSE_API_KEY in
the server’s environment.Authentication (local server)
The local server forwardsWEAVERSE_API_KEY to the Content API as
Authorization: Bearer <key>. It never validates or stores the token itself —
the Content API enforces shop scoping and scopes. An account tool called without
a valid, sufficiently-scoped key returns a clear auth error, never data.
1
Get a key
Create a Content API key in Weaverse Dashboard → Account → API
Keys.
2
Add it to your MCP config
Put it in the
env block as shown above.3
Confirm
Ask your agent to call
list_projects. It returns the projects the key can
access.Scopes & shop isolation
Account tools map to Content API scopes (content:read for reads,
content:write for edits, content:delete for delete_pages). Each key or
connection is scoped to a single Weaverse store: requests can only touch that
store’s projects, and reaching across stores returns a 403. Revoke keys in
Dashboard → Account → API Keys and hosted connections in Dashboard →
Account → Connected AI apps.
Available tools
Docs (no API key; the hosted connector still requires sign-in)
search_weaverse_docs
Search the Weaverse knowledge base for features, schema/input settings, SDK
hooks, theme settings, and implementation guides. Returns titles, direct links,
and content. Also registered as
search_docs.Backed by the official Weaverse documentation MCP (hosted by Mintlify) — the
knowledge base, ranking, and freshness all live upstream.Account reads (hosted connection or WEAVERSE_API_KEY)
Live edits (opt-in)
Edit tools appear only when edits are allowed: on the local server withWEAVERSE_ENABLE_LIVE_WRITES=true and a key, and on the hosted connector when
you granted the edit permission (content:write). delete_pages is listed
with them but also needs the delete permission (content:delete).
The edit tools require
@weaverse/mcp 4.0.0 or later for the
update_project revision check and the required locale on handle
deletes. npx -y @weaverse/mcp fetches the latest version.Try it
Once@weaverse/mcp is connected, a read-only prompt is a safe first check:
Use the Weaverse MCP server. List my Weaverse projects. For the first project, list its pages and summarize them by page type and locale. Do not call any write tools.
Content writes & safety
- Read first, then write. The three update tools take a baseline from
your last read:
update_page(get_page.updatedAt),update_theme_settings(get_theme_settings.revision) andupdate_project(get_project.revision). If someone changed the content since (for example in Studio), the write is rejected with409instead of overwriting newer work. Re-read and try again. The hosted connector requires the baseline on these three tools.create_page,assign_template_resourcesanddelete_pagestake no baseline; they have their own checks (for example, a duplicate page or a missingcontent:deletepermission is refused). - Send only the keys you mean to change; nested objects are replaced wholesale.
- A
500after a create, delete or assignment may come after the change was saved. Re-read before retrying.
- Page content — merge item data, create items, relink children
(
update_page), create pages (create_page), attach resources to a template page (assign_template_resources), and soft-delete pages (delete_pages). - Theme settings — top-level key merges only (
update_theme_settings). Weaverse attempts a theme-version snapshot, but this connector cannot restore it. - Project —
nameonly (update_project). This renames the project in Weaverse (project metadata); it does not change storefront content.
How docs search relates to docs.weaverse.io/mcp
https://docs.weaverse.io/mcp is the Mintlify-hosted, docs-only MCP (it resolves
to https://weaverse.io/docs/mcp). @weaverse/mcp proxies that exact docs search
and layers the account tools on top. Pick the hosted URL for a zero-install docs
lookup; pick @weaverse/mcp when you want your agent to work with your projects.
Related
Content API
The REST API the account tools wrap — reads and writes. The MCP is its agent-native front end.
Shopify Hydrogen Skills
Agent skills for building Weaverse + Hydrogen storefronts. After setup, the same key powers the account tools here.
Weaverse CLI
Project setup and theme scaffolding.
Weaverse SDKs
Build custom components for Weaverse Hydrogen themes.
Troubleshooting
Account tools return an authentication error
Account tools return an authentication error
- Local server: confirm
WEAVERSE_API_KEYis set in the server’senvblock and the key is not revoked in Dashboard → Account → API Keys. - Hosted connector: reconnect. The connection may have been disconnected in Connected AI apps, or the store uninstalled Weaverse.
- Docs tools work without a key; only the account tools need one.
An edit is rejected with 409 or asks for a baseline
An edit is rejected with 409 or asks for a baseline
- Someone changed the content since your last read. Re-read with
get_page,get_theme_settingsorget_project, then apply the change again. - The hosted connector requires
expectedUpdatedAt/expectedRevisionfrom that read forupdate_page,update_theme_settingsandupdate_project.
“Access denied” on a project
“Access denied” on a project
- The key is scoped to one shop. You can only access that shop’s projects.
- Use
list_projectsto see exactly what the key or connection can reach.
Server won't start
Server won't start
- Ensure Node.js is installed and
npx -y @weaverse/mcpcan run. - Restart your AI tool after editing its MCP config.
- The server logs a startup line to stderr noting whether account tools are enabled.
No docs results
No docs results
- Be specific and use Weaverse terms (e.g.
createSchema,WeaverseRoot, “input settings”). - Docs search requires network access to the hosted documentation MCP.