Saleor MCP Quickstart
This guide takes you from installing Saleor MCP to your assistant’s first query. You need a Saleor Cloud environment on Saleor 3.23 or later.
Steps 1 to 3 configure the app and need a staff user with both MANAGE_APPS and MANAGE_STAFF. MANAGE_APPS alone isn’t enough. Saleor also lets you grant only permissions you hold yourself, so the person who sets up the app should hold every permission you want assistants to use. See Who can configure Saleor MCP.
Steps 4 and 5 are for anyone who wants to use an assistant. Any staff user can connect.
1. Get the App
Saleor MCP may already be installed. Check Extensions → Installed in the Saleor Dashboard.
If it isn’t there, install it from Extensions → Explore. Installing needs MANAGE_APPS, and you must hold MANAGE_STAFF yourself, because the app asks for it.
2. Set App Permissions
App permissions are the most Saleor MCP can reach for anyone in the environment.
- Open Saleor MCP → Settings.
- Under App permissions, choose the areas Saleor MCP may reach, then select Review changes and approve them in Saleor.
Saleor checks this change against your own permissions:
- You can add only permissions you hold yourself.
- You must also hold every permission the app already has. Otherwise, Saleor rejects any change with “You can’t manage this app.”
The app also needs MANAGE_STAFF to read your permission groups for the group policy. Keep it.
3. Grant Access to Permission Groups
A permission group with no assignment gets no access through Saleor MCP.
- In Saleor MCP → Settings → Group policy, pick a permission group.
- For each area, choose None, Read, Edit, or Full.
- Save.
Start with Read to try things out. See Permissions and Mutation Tiers for what each level allows.
The group policy is an upper limit, not a grant. A member can use an area only if they also hold its permission in Saleor, and only if the app holds it too. See How access is calculated.
4. Connect a Client
Open Saleor MCP → Connect, pick your client, and copy the setup it shows. It already has the right MCP URL for your environment, so don’t type the URL by hand. Staff users without MANAGE_APPS can open the app from the Dashboard home page, or by searching the Dashboard for “Connect an AI assistant”.
| Client | The Connect page gives you | Then |
|---|---|---|
| Codex | A codex mcp add command. Run it in your terminal. |
Sign in with codex mcp login saleor. See the Codex MCP docs. |
| Claude Code | A claude mcp add command. Run it in your terminal. |
Run /mcp in Claude Code and sign in. See the Claude Code MCP docs. |
| Other clients | A JSON mcpServers entry. Add it to any client that supports remote MCP servers over Streamable HTTP with OAuth. |
Sign in from the client. |
When you sign in, your client opens a browser. Sign in with your Saleor Cloud account and approve the access the assistant may use. You can lower any area before you approve.
For agents that run without a person signed in, use an access key instead.
5. Try It
Ask your assistant for a briefing:
Brief me on what's going on in my Saleor environment.The assistant checks who it is connected as and what it can access, then looks around within that access.
Then ask a question about your store, for example:
List the five most recently created products.To check what the assistant did, a staff user with MANAGE_APPS and MANAGE_STAFF can open Saleor MCP → Activity.
Next Steps
- Learn how authentication works for staff and agents.
- Give a group Edit or Full access once you know what each mutation tier allows.