AgentLink quickstart
What is AgentLink?
AgentLink is a Shopify embedded app that provides agentic-commerce infrastructure: a Universal Commerce Protocol (UCP) profile host, a Model Context Protocol (MCP) tool proxy, automated readiness audits, and a security-hardened control plane. It runs on Cloudflare Workers with PostgreSQL.Shopify scopes
AgentLink requests the minimum scopes it actually reads:read_products— catalog readiness checks and schema feeds.read_inventory— inventory drift detection.read_legal_policies— Shopify-hosted policy checks.
Extensions
AgentLink has no theme app extensions or POS extensions. It operates entirely through its embedded admin surface and public API routes.Authentication model
Integrators and external agents authenticate to the public proxy endpoints by providing the shop domain as a route or query parameter. The MCP proxy forwardsAuthorization and MCP-Protocol-Version headers to the shop’s MCP endpoint.
Merchant admin APIs use Shopify App Bridge session tokens (HS256 JWTs). Mutation routes check for owner/admin subject claims. Full session-token validation includes iss, dest, aud, sub, iat, nbf, and exp with five-second clock skew tolerance.
Integration points
- UCP profile discovery —
/.well-known/ucp?shop=<domain>returns a signed agent profile with ECDSA P-256/SHA-256 proof. - MCP tool proxy —
POST /mcp/:shop/storefrontor/mcp/:shop/ucpforwards JSON-RPC tool calls. - API reference — see the API overview for the complete endpoint catalog.
- Webhooks — AgentLink receives Shopify webhooks for billing, drift, and privacy compliance.
Getting started
- Read the architecture overview for the full system design.
- Explore the API reference for public and authenticated endpoints.
- For deployment and local development, see the app’s
README.md(not published here).
Plan tiers
AgentLink offers three subscription plans through Shopify billing. Verified developer stores receive automatic Scale access for testing.
Pcnaid Documentation › Shopify Ecosystem › AgentLink › Developer