Saleor MCP Overview

Saleor MCP is a hosted Saleor App that lets AI assistants and agents read and change data in your Saleor Cloud environment. It connects them to Saleor’s GraphQL API through the Model Context Protocol (MCP), within the access you allow.

Saleor MCP has no fixed list of commerce actions. Its tools let the assistant look up the schema and run GraphQL. The assistant works in three steps:

connection_info: who am I, and what am I allowed to do?
introspect_schema: which operations, arguments, and fields exist?
run_query, run_mutation, or run_high_impact_mutation: run the operation and read the GraphQL response.

Features

Two ways to connect. Staff connect their AI assistant with their own Saleor Cloud login (OAuth). Agents and automations that run on their own use an access key created in the Dashboard. See Authentication.
Permission-aware. An assistant never gets more than the app permissions, the user’s own Saleor permissions, and the app’s group policy allow. See Permissions and Mutation Tiers.
Reviewed mutations only. Saleor MCP runs only mutations that Saleor has reviewed. Everyday changes and high-impact changes use separate tools, so your MCP client asks for approval separately.
Activity log. Every tool call appears in the app’s Activity tab, so staff with MANAGE_APPS and MANAGE_STAFF can see who did what.
No Saleor tokens in clients. MCP clients never receive a Saleor token.

Limitations

Some areas can’t be changed through Saleor MCP, such as staff, apps, webhooks, customers, checkouts, metadata, channels, and shop settings. Use the Saleor Dashboard for those. See Mutation tiers.

Next Steps

Follow the quickstart to grant access, connect a client, and run your first query.