Connect Claude, Cursor, Hermes or any AI agent with MCP

Store Console has a built-in MCP server (Model Context Protocol). An AI agent you already use, such as Claude, Cursor, VS Code or the Hermes agent, can connect to your store and work in it: list today's orders, change an order's status or its products, record a cash-on-delivery payment, update a price, adjust stock, find a customer, pull a sales or stock report, and plan and schedule Social Hub posts. The agent uses the same tools as the assistant inside the admin panel and never does more than the person who owns the token is allowed to do.

At a glance

Area	What an agent can do	Asks for your yes
Orders & sales	Search and filter orders, open one order with its lines and address, take a phone order, change its status, edit its products before it ships, record cash on delivery or a bank transfer, open a refund, sales and product sales reports	Every change; a refund still waits for a person to approve it under Refunds
Products	Search products, open one product, create a draft product, change names, descriptions, SEO, brand and categories, publish or unpublish, set price and sale price	Every change
Stock	Stock per warehouse, low and out-of-stock lines, add or remove units with a reason	Every adjustment
Customers	Find customers, see addresses, orders by status and recent orders, customer report	—
Product reviews	Reviews waiting for moderation or with low ratings; approve, reject with a reason, or reply publicly	Every action
Social Hub	Connection status for Facebook, Instagram, WhatsApp, TikTok, YouTube and X, the content calendar, post status and results, publish now or schedule a post, reschedule, cancel or retry, reports, approval queue and comments	Publishing, scheduling and changes
Delivery	Parcels and their status, courier list, book a courier, change a parcel's status	Booking and status changes
Marketing & CRM	Create coupons and sale campaigns, find and add leads and deals	Every change
Content & media	Write blog posts, upload images and videos to the media library	Blog posts
Support, projects, suppliers	Find, open, answer and resolve tickets; find, create, move and assign Momentum tasks; find and add suppliers	Every change
People	Leave requests waiting for approval; approve, or reject with a reason the employee sees	Every decision
Reports	Sales, accounting, budget, finance, marketing, abandoned cart, stock, HR, payroll and support reports	—

1. Turn MCP on

1. Go to Intelligence → MCP & AI agents.
2. On the Connect tab, switch on Allow AI agents to connect. Only an administrator can do this.
3. Choose how many requests a token may send per minute (60 by default) and save.

While MCP is off, every agent request is refused, even with a valid token.

2. Create your access token

1. Open Access tokens and press Create token.
2. Give it a name, for example "Marketing team — Claude".
3. Choose what it may reach: for all areas or area by area, No access, Read only or Read and change.
4. Pick an expiry and press Create token.
5. Copy the token straight away. It starts with scmcp_ and is shown only once, together with a ready setup for your agent (the token is hidden on screen; Copy puts the real one on your clipboard).

A token works as the person who created it. For the marketing team, sign in as a user with the Social Media Manager role and create the token there with the Social Hub scope: the agent can then plan and schedule posts and read Social Hub reports, but cannot see orders, customers or prices.

3. Connect your agent

The server address is https://your-store.com/mcp. Send the token in the Authorization header as Bearer YOUR_TOKEN. The Connect tab shows each setup below with your own address filled in.

Claude Code

claude mcp add --transport http store_console https://your-store.com/mcp --header "Authorization: Bearer YOUR_TOKEN"

Cursor (.cursor/mcp.json)

{ "mcpServers": { "store_console": { "url": "https://your-store.com/mcp", "headers": { "Authorization": "Bearer YOUR_TOKEN" } } } }

Claude Desktop (claude_desktop_config.json, needs Node.js)

{
  "mcpServers": {
    "store_console": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://your-store.com/mcp", "--header", "Authorization:${AUTH_HEADER}"],
      "env": { "AUTH_HEADER": "Bearer YOUR_TOKEN" }
    }
  }
}

Hermes agent (~/.hermes/config.yaml)

mcp_servers:
  store_console:
    url: "https://your-store.com/mcp"
    headers:
      Authorization: "Bearer YOUR_TOKEN"

Any other MCP client

{ "mcpServers": { "store_console": { "type": "http", "url": "https://your-store.com/mcp", "headers": { "Authorization": "Bearer YOUR_TOKEN" } } } }

Then ask your agent something simple, such as "show today's orders", to check that it works.

4. How changes are kept safe

• Your permissions, every time. Each tool checks the token owner's role before it runs. Tools the role cannot use are not even offered.
• Changes wait for your yes. When the agent wants to change an order, a price, stock or a post, the store first replies with a short summary and saves nothing. The agent shows you the summary, and only after you agree does the change happen.
• Every request is logged. The Activity log tab, and the main Activity Log under MCP, show who, which token, the tool, the result and how long it took. Secrets are never stored in the log.
• Revoke or delete. Revoke stops a token at once; Delete also removes it from the list.
• Limits and off switch. Each token has a per-minute limit. Revoke a token at any time, or turn MCP off for the whole store.
• Some jobs stay inside. Running, creating or deleting scheduled tasks is never available to outside agents.

Questions

The agent says the token is missing or wrong. Check that the header reads Authorization: Bearer scmcp_…, that the token has not expired and that it was not revoked.

A tool I expected is missing. Your role does not include that area, or the token's scopes leave it out. Open the Tools tab to see exactly what your role can use.

The agent says MCP is turned off. Ask an administrator to switch on Allow AI agents to connect.