feat(shopify): add read-only Shopify Admin GraphQL API MCP

[rafavalls]

Summary

• Adds a new Shopify MCP server (shopify/) with read-only access to the Shopify Admin GraphQL API
• Covers products, collections, orders, draft orders, customers, inventory, fulfillment, discounts, online store content, B2B, markets, Shopify Payments, and ShopifyQL analytics
• Registered in registry.json with public listing and OAuth support, deployed via deploy.json on kubernetes-bun

Test plan

• Run bun run check in shopify/ to verify TypeScript types
• Run bun run validate:queries to validate GraphQL queries
• Run bun test in shopify/ to execute unit tests
• Test connection with a valid Shopify Admin API token against a dev store

🤖 Generated with Claude Code

---

Summary by cubic

Adds a new read-only MCP server for the Shopify Admin GraphQL API under shopify/, exposing tools for catalog, orders, customers, inventory, fulfillment, discounts, content, B2B/markets, Shopify Payments, and ShopifyQL analytics. Publicly registered with OAuth and wired for deployment on kubernetes-bun.

• New Features

  • Read-only server pinned to API 2026-07; all tools are GraphQL queries (no mutations).
  • New shopify/ workspace with server/, TOOLS.md, README.md, and app.json (connection schema).
  • Tool coverage includes products/collections, orders/drafts/returns, customers/segments, inventory, fulfillment, discounts, online store content, B2B/markets, Shopify Payments, and ShopifyQL.
  • Robust client: store domain normalization, retry with backoff, timeout, pagination helpers, and typed inputs via zod.
  • Dev utilities: scripts/validate-queries.ts to validate documents against Shopify’s schema, plus unit tests.
  • Integration: registered in registry.json (public, OAuth), added to root package.json, deploy config in deploy.json (entrypoint dist/server/main.js) for kubernetes-bun using @decocms/runtime and @decocms/mcps-shared.

• Migration

  • Create a connection using shopify/app.json: set storeDomain (e.g. my-store.myshopify.com) and place the Admin API token in the connection’s Authorization field; set apiVersion if you need a non-default.
  • Ensure the token has required read scopes for the tools you’ll use (e.g. read_products, read_orders, read_customers, read_inventory, read_fulfillments, read_discounts, read_content, read_locales, read_shopify_payments_*, read_reports).
  • Deploy via deploy.json on kubernetes-bun or run locally with bun run dev; build with bun run build.

^{Written for commit ebff24f. Summary will update on new commits.}