Use Shopware with AI via MCP
Shopware is one of the few systems that ships MCP out of the box: since version 6.7.11.0 the shop exposes its own MCP server on your own domain – flagged experimental up to version 6.8.0. CompanyGPT connects to it directly – no additional middleware, and no shop data routed through third parties.
What is Shopware?
Shopware is an open-source shop system from Shopware AG, headquartered in Schöppingen, North Rhine-Westphalia. It powers B2C and B2B commerce and is available in the Rise, Evolve and Beyond editions, both as a cloud offering and self-hosted. Across German-speaking e-commerce it is one of the defining platforms, particularly for manufacturers and merchants with their own process requirements.
A shop’s data is especially rich ground for AI agents: products and variants, categories, prices, stock levels, orders, customers and system configuration are all structured. That makes it possible to answer questions from sales, category management and customer service straight from the data, instead of assembling reports click by click in the admin backend.
Connection at a Glance
- MCP server
- Built into Shopware since version 6.7.11.0 (experimental up to 6.8.0), on your own shop domain
- Endpoints
- /api/_mcp (Admin API), /store-api/_mcp (Store API)
- Transport
- Streamable HTTP
- Authentication
- OAuth 2.0 client credentials via a Shopware integration
- Operating model
- SaaS (Shopware Cloud) or self-hosted
- Activation
- Active by default since 6.7.14.0, 15 core tools with tool discovery (plus 9 experimental merchant tools)
How to Connect Shopware to CompanyGPT
Shopware 6 has shipped a built-in MCP server since version 6.7.11.0 – a distinguishing feature among widely used shop systems. Up to version 6.8.0 Shopware lists the feature as experimental. The endpoint lives on your own shop domain: https://{shop-domain}/api/_mcp for the Admin API and https://{shop-domain}/store-api/_mcp for the Store API. Since version 6.7.14.0 the server is active by default; the former MCP_SERVER=1 environment flag has been removed. It exposes 15 core tools with tool discovery, including entity CRUD and system configuration; 9 additional experimental merchant tools are available as a package at github.com/shopware/SwagMcpMerchantTools.
Authentication runs through OAuth 2.0 client credentials: in Shopware you create an integration under Settings and receive an access key ID and secret. We store those credentials inside your CompanyGPT environment. Through the integration’s roles you control within Shopware itself which entities and actions are reachable at all – a purely read-only setup for reporting maps cleanly onto this.
Because the MCP endpoint sits on your own shop domain, CompanyGPT connects straight to your installation; no third-party service sits in between. For installations that are only reachable internally, we arrange the necessary network access between the CompanyGPT environment and the shop together with your IT team. On top of that, your administrators use roles and groups in CompanyGPT to decide which teams may use the Shopware integration.
Typical Use Cases
How AI agents in CompanyGPT work with Shopware
Review assortment and master data
Category management asks for products without descriptions, missing images or inconsistent category assignments and receives a concrete list to work through.
Trace orders in customer service
When a query comes in, the agent retrieves the status, line items and shipping data of an order and drafts a reply for the customer from it.
Prepare product copy and attributes
For new articles, descriptions and attribute suggestions are generated from existing data sheets and written back into the shop through the Admin API once approved.
Frequently Asked Questions
Shopware and AI – the most important answers
Does Shopware have an official MCP server?
Yes. Shopware has shipped the MCP server since version 6.7.11.0, flagged experimental up to version 6.8.0. It runs as part of your own shop installation at /api/_mcp or /store-api/_mcp and has been active by default since version 6.7.14.0 – the former MCP_SERVER=1 flag is no longer needed.
What is the difference between the Admin API and the Store API?
The Admin API represents the management view – products, orders, configuration. The Store API mirrors the shop's customer view. Which endpoint makes sense depends on the use case; both can be enabled separately.
How is access secured?
Through a Shopware integration using OAuth 2.0 client credentials. The access key ID and secret are stored exclusively in your CompanyGPT environment, and the integration's role assignment limits which entities and actions are reachable.
We run Shopware self-hosted in our own data centre. Does that work?
Yes. What matters is that the CompanyGPT environment can reach your installation's MCP endpoint. For installations that are not publicly accessible, we set up the connection together with your IT team.
Can the AI modify products or orders?
Only within the rights you grant the Shopware integration and the tools enabled in CompanyGPT. Research and reporting need read access only; write actions can be enabled selectively and separately.
Does our shop data stay under our control?
The MCP endpoint sits on your own shop domain and CompanyGPT runs in your own cloud tenant. Communication happens directly between the two systems, with no intermediary providers.
Shopware and Your AI – GDPR-Compliant with CompanyGPT
CompanyGPT is the enterprise AI assistant in your own cloud tenant: all relevant AI models, your company data and integrations like Shopware – centrally managed, with roles and permissions. We set up the connection together with you.
Shopware is a trademark of its respective owner (Shopware AG). Its mention describes compatibility and does not imply any partnership or endorsement. Availability and scope of the connection depend on the respective vendor.