MCP server for your webshop: what it does for AI visibility

Status as of 5 November 2026. Sources: Model Context Protocol, specification 18 June 2025 and What is the Model Context Protocol (MCP)?; OpenAI, ChatGPT Business release notes (4 June 2025) and Introducing apps in ChatGPT and the new Apps SDK (6 October 2025); Google Search Central, Optimizing your website for generative AI features on Google Search (updated 10 July 2026); Google Nederland, De AI-modus komt naar Google Zoeken in Nederland (8 October 2025); Riverty, Meer dan helft Nederlanders wantrouwt AI als koper (10 March 2026, Appinio study December 2025).

Swipe the diagram sideways if it sits narrow.

What is an MCP server?

An MCP server is software that offers AI assistants a fixed list of actions, such as searching products or showing stock for an item. The assistant then does not have to read your website as a person would. It gets a structured and current answer. The MCP specification of 18 June 2025 describes servers as services that offer context and capabilities to clients, including tools, resources and prompts.

The documentation What is the Model Context Protocol (MCP)? names Claude and ChatGPT as assistants that support MCP. On 4 June 2025 OpenAI wrote about custom connectors with MCP for ChatGPT business plans. On 6 October 2025 OpenAI presented the Apps SDK as an open standard built on MCP.

What do AI assistants read on your store?

Four things matter most when an assistant still has to find your shop. Your robots.txt file decides whether AI crawlers may fetch your pages. Structured data on product pages gives price, stock, brand and specifications in a fixed form. Product feeds supply Google Merchant Center and similar channels. Clear text on product and category pages remains the base.

Google Search Central writes in the AI optimization guide (updated 10 July 2026) that generative AI features in Search lean on the same index and on SEO quality. Unique non-commodity content is likely to influence your presence. Google Search, according to that guide, does not use llms.txt. It neither helps nor hurts in Search. If another system asks for such a file, it may exist. I do not treat it as a Google SEO action.

Want the 15 October 2026 changes in AI Overviews and AI Mode in one place, including the Generative AI report in Search Console? That is in AI Overviews: what Google changed and what you should check.

Will an MCP server raise me in ChatGPT?

No. There is no evidence for that. Whether an AI assistant names you depends mainly on what sits about you in the search index and in product feeds, on how well you are known, and on whether AI crawlers may read your pages. An MCP server helps an assistant that already works with your shop. It does not choose that shop for the assistant.

Why this matters now for a Dutch online store

On 8 October 2025 Google Nederland announced the rollout of AI Mode in Google Search, in Dutch, as a tab on the results page and in the Google app. According to Google, that mode uses query fan-out and leans on the same quality and ranking systems as Search. People who compare products can therefore do that inside an AI answer.

People still want to keep the final button. Riverty published research on 10 March 2026 among 1,000 Dutch consumers (Appinio, December 2025). It found that 56 percent say all purchases require human confirmation.

Can an AI agent place an order through an MCP server?

Technically a server can do more than read. Tools, according to the MCP specification, are functions a model may run. User consent belongs with that: the specification lists user consent and control as the first security principle. For an online store that means: an agent may search and prepare a cart. The customer confirms and pays themselves.

In my own store I wanted to stop an assistant from passing on a wrong price or stock figure. The agent therefore only prepares a cart. The server recalculates the price. Shipping and the total go into that. The customer gets a payment link and pays in their own checkout. Nothing goes through until someone says yes. I also describe that person in the chain in Human in the loop: where you put a person in the chain.

Whether a process needs an agent at all, or a regular workflow is enough, is in Business process automation.

How does this work on Shopify, WooCommerce and Magento 2?

Shopify documents a store-level MCP entry point for catalogue, cart and policies. On the page Migrate from Storefront MCP (retrieved 5 November 2026) Shopify writes that the catalogue and cart tools on /api/mcp have been removed. Those capabilities now sit through the Universal Commerce Protocol at /api/ucp/mcp. For a Shopify store you therefore rarely build a second, parallel server. The work sits in your product data, feeds and settings.

WooCommerce does have an official MCP integration, and according to the developer docs it is still a developer preview. WooCommerce registers product and order abilities through the WordPress Abilities API. To offer them to MCP clients you install the MCP Adapter plugin. The endpoint is /wp-json/mcp/mcp-adapter-default-server. The older /wp-json/woocommerce/mcp endpoint was removed in WooCommerce 11.3. Authentication uses a WordPress user and an Application Password, over HTTPS. The docs advise a dedicated user with only the rights the client needs. Note: WooCommerce also registers write actions, such as creating or updating products. You set read-only access yourself through the permissions.

For Magento 2, on 5 November 2026 I found no standard MCP endpoint in the public core documentation of the kind Shopify does describe. An entry point then has to be set up, as a module in the shop or as a separate server that reads the shop API.

The technical MCP integration I offer is on the MCP integration page. For online stores in general, see for online stores.

Is an MCP server safe?

Only if it is set up with intent and then maintained. The MCP specification of 18 June 2025 has its own chapter on Security and Trust and Safety. Core points: users must give consent and stay in control, data must not travel further without permission, and tools are arbitrary code execution that you treat with restraint. Implementers have to build consent flows, access control and risk documentation themselves. The protocol does not enforce that.

In practice I start with read-only access, a dedicated key or user with minimal rights, rate limits and logs. Write actions, such as preparing a cart, come only after an explicit choice. WooCommerce says the same in other words: connect as a dedicated user, use HTTPS, and be aware of personal data in order actions. After every platform update a test belongs on the list, especially while the WooCommerce integration is preview. For the wider data rules see AI Act, GDPR and your data.

What I have seen so far in my own work

If assistants cannot read your catalogue, they stay with whoever does have current data. You want to keep them from passing on a wrong price about your shop. I run MCP servers myself, connected to my own shop. Assistants can then request current products and stock.

On two MCP servers that I run myself I counted 294 calls in 30 days, of which 17 came from real users with an AI assistant. The rest were checks and directories. The 17 real calls came from business users. Date of that count: 3 November 2026, from my own server logs. Recognition via user-agent is a lower bound: an assistant that calls through the provider’s servers can arrive under a generic name.

I also build this setup for companies and I manage it afterwards, watched with logs. You stay in control. Writing or preparing a cart happens only if you want that. The aim is less lookup work, and to keep assistants from talking about your shop with stale data.

Download: checklist for AI assistants and your store

I made a checklist with 15 rows that you can work through in a short session. You get an Excel file to fill in and a PDF in AIAgentCycle house style to print or share with a colleague. Download the checklist as Excel or the checklist as PDF. The question is the same: can AI assistants read and use your data?

Rows 1 to 8 cover crawlers, structured data, feeds, Search Console and unique content. Row 9 is the promise you should not make: no higher place in ChatGPT from an MCP server alone. Rows 10 to 13 follow Shopify, WooCommerce and Magento 2. Row 14 is security. Row 15 is measuring, even when the number is zero.

What you can do this week

1. Open robots.txt. Check that the AI crawlers you want to allow are not listed as Disallow.
2. Check one product page. Do price and stock match in the visible text and in the structured data?
3. Look at your platform. Shopify: read the current MCP/UCP docs. WooCommerce: check whether the adapter plugin is even on, and with which rights. Magento 2: ask whether an endpoint already exists on staging.
4. Do not put a guarantee in your own copy. No higher place in ChatGPT, no revenue within a set period, no fully autonomous purchase.
5. Measure a baseline. Open the Generative AI report in Search Console if your site is in scope. Write down what you see, even if it is empty.

In short

• An MCP server is a structured entry point for AI assistants. MCP means Model Context Protocol.
• It does not promise a higher place in ChatGPT, Gemini or Google AI Mode. AI visibility starts with crawlers, content, schema and feeds.
• Shopify documents its own MCP/UCP entry point. WooCommerce has a preview through the MCP Adapter. Magento 2 does not have that standard entry point in the core docs (as of 5 November 2026).
• Ordering can work technically, with a person who confirms and pays themselves.
• Use the checklist (Excel + PDF) to test your site this week.

This article describes the situation on 5 November 2026. I will revise it by 5 February 2027 at the latest, or earlier if Shopify, WooCommerce or the MCP specification change their documentation again.

---

Frequently asked questions about MCP servers

What is an MCP server?

An MCP server is software that offers AI assistants tools, resources or prompts through the Model Context Protocol. The assistant then gets structured access to, for example, your catalogue, instead of reading your site as a person would. Answer source: MCP specification, 18 June 2025, and What is the Model Context Protocol (MCP)?. Question source: Google autocomplete Netherlands “mcp server wat is dat” and “wat is een mcp server”, 5 November 2026. The English question has the same meaning.

How does an MCP server work?

MCP uses JSON-RPC between hosts (the AI application), clients (the connector inside it) and servers (the service that offers tools or data). Server and client negotiate capabilities. Answer source: MCP specification, 18 June 2025, Overview and Key Details. Question source: SE Ranking SERP for “mcp server”, related search “How does an mcp server work”, 5 November 2026.

What is a remote MCP server?

A remote MCP server runs at a network address, usually over HTTP on a domain, so an AI assistant can connect from elsewhere. OpenAI writes that ChatGPT connects to remote MCP servers and does not connect directly to a local server on a laptop. Answer source: OpenAI Help Center, Connecting custom MCP servers in ChatGPT, retrieved 5 November 2026. Question source: SE Ranking SERP for “mcp server”, related search “What is remote MCP server”, 5 November 2026.

How do I set up an MCP server?

That depends on your platform. Shopify documents its own MCP/UCP endpoint per store. WooCommerce needs the MCP Adapter plugin and a user with an Application Password, and the feature is preview. Magento 2 has no comparable standard endpoint in the core documentation (as of 5 November 2026). A local MCP server runs on your own machine, often through a desktop host such as Claude Desktop. ChatGPT, according to OpenAI Help Center (Connecting custom MCP servers in ChatGPT), does not connect to that local server directly. For a webshop the useful path is usually a remote server or a platform endpoint. Answer source: Shopify Migrate from Storefront MCP and WooCommerce MCP Integration docs, both retrieved 5 November 2026. Also OpenAI Help Center, Connecting custom MCP servers in ChatGPT. Question source: Google autocomplete Netherlands “mcp server opzetten”, 5 November 2026, and SE Ranking People Also Ask “How do I run a local MCP server?”, 5 November 2026.

Does an MCP server work with Claude?

Yes. The official MCP documentation names Claude (and ChatGPT) as AI assistants that support MCP. Whether your specific server fits a given Claude product depends on the transport (local or remote) and on the settings in that product. Answer source: Model Context Protocol, What is the Model Context Protocol (MCP)?, Broad ecosystem support. Question source: Google autocomplete “mcp server claude”, 5 November 2026, plus related search “Mcp servers claude”.

Further reading on AIAgentCycle

• AI Overviews for what Google itself says about AI answers in Search.
• Human in the loop when an agent may prepare something and a person has to say yes.
• Business process automation to choose which type of automation fits.
• AI agents solution if you want agents to fit safely into your processes.
• Free automation scan: within 2 working days after the conversation, a mini advisory report with your three biggest time drains.