How to Set Up the Shopify AI Toolkit with Cursor

Key takeaways

• The Cursor Marketplace plugin is a one-click install and auto-updates with new capabilities.
• Manual skills installation works but schemas drift from the live platform over time without manual updates.
• Set OPT_OUT_INSTRUMENTATION=true before your first validation if you’re working with proprietary code. Validation payloads include your code by default.
• Cursor’s codebase awareness paired with the toolkit’s schema validation is a strong combination for Shopify development.
• Store operations execute immediately on your live store. There is no draft step and no undo.

Cursor is one of the AI coding tools officially supported by the Shopify AI Toolkit. Once installed, your Cursor environment gets access to current Shopify documentation, code validation against bundled API schemas, and the ability to execute store operations through the Shopify CLI.

This guide covers setup and what to know. For the full breakdown of what the toolkit does, how it works, and the governance risks around store execution, see our Shopify AI Toolkit overview.

Why you can trust us

Jacques has over 15 years of development experience and has worked with hundreds of Shopify stores. We built Fudge - an AI-native Shopify page builder and store editor with a 5.0 rating and a Built for Shopify badge. We use these tools daily.

Prerequisites

• Cursor installed and running
• Node.js 18 or higher (node --version to check)
• Shopify CLI installed (required for store operations)
• A Shopify store to connect to (only needed if you plan to execute store operations)

Installation: plugin method (recommended)

The plugin method is the simplest path and auto-updates with new capabilities.

Step 1: Install from the Cursor Marketplace

Install the Shopify AI Toolkit directly from the Cursor Marketplace. It’s a one-click install.

All available agent skills are included automatically.

Step 2: Verify it’s working

Open Cursor’s AI chat and ask something Shopify-specific:

What's the correct GraphQL mutation to create a new product in Shopify's Admin API?

If the toolkit is active, Cursor will pull from current Shopify documentation rather than its training data. You’ll notice the responses include accurate, validated field names.

Alternative: manual skills installation

Install skills via terminal:

All skills

npx skills add Shopify/shopify-ai-toolkit

Specific skills only

npx skills add Shopify/shopify-ai-toolkit --skill shopify-admin
npx skills add Shopify/shopify-ai-toolkit --skill shopify-liquid

Manually installed skills don’t auto-update. The bundled schemas will gradually drift from the live platform if you don’t re-install periodically.

Alternative: MCP server setup

For direct MCP integration, you can connect to Shopify’s Dev MCP server by adding configuration to Cursor’s MCP settings. The Dev MCP server runs as a local server/client integration but makes network calls to Shopify endpoints for documentation search.

Refer to the Shopify AI Toolkit docs for the specific JSON configuration format. There are also Windows-specific configuration notes if you experience stability issues with the default setup.

Telemetry and code transmission

Before you start validating code: both validate.mjs and search_docs.mjs send usage payloads to Shopify’s servers by default.

The SKILL.md files describe this as “anonymized validation results (pass/fail and skill name).” However, the actual validation payload includes the code being validated - your GraphQL queries, Liquid templates, and other code you run through the validator.

To opt out, set this environment variable before launching Cursor:

export OPT_OUT_INSTRUMENTATION=true

If you’re working with proprietary or client code, set this before your first validation.

Connecting to your store

For store operations (not just code generation and validation), you need to authenticate.

Authentication flow

When you request a store operation through Cursor, the toolkit triggers:

shopify store auth --store yourstore.myshopify.com --scopes write_products,read_products

This opens a browser window where you authorize the connection through your Shopify admin.

Common OAuth scopes

Always use the minimum scopes needed. The toolkit’s validation script detects what’s required for each operation, but write_products still grants access to ALL product write operations, not just the specific mutation you’re running.

What you can do with Cursor + Shopify AI Toolkit

Validated code generation

The biggest immediate benefit: Cursor stops hallucinating Shopify APIs.

Without the toolkit, Cursor might generate GraphQL with deprecated fields, incorrect types, or non-existent mutations based on stale training data. With the toolkit, every query and mutation is validated against the bundled Shopify API schema.

Use Cursor’s codebase context

Cursor excels at understanding your full project. Combine the Shopify toolkit with Cursor’s codebase awareness:

Look at how I've structured the other product queries in this project and write a new one for fetching product recommendations, validated against the current Shopify API

Theme development

Work with Liquid templates with validation against Shopify’s theme rules - including schema blocks and LiquidDoc headers.

Related: adding custom Liquid logic in Shopify.

Hydrogen storefronts

Build headless storefronts with validated React components and correct imports.

Store operations

Execute operations directly on your connected store. Any store operation that writes data executes immediately on your live store. There is no draft step. See the full risk breakdown for why this matters.

Metafield management

Extend your store’s data model with metafield definitions and custom data.

Related: adding metafields to Shopify products.

Functions and extensions

Build backend customization - discounts, cart validation, delivery rules - and scaffold UI extensions.

Related: adding custom JavaScript in Shopify.

Best practices for Cursor users

1. Query before you mutate

Always read current state before making changes:

First, show me the current product data for handle "summer-collection-tee", then update only the description

2. Be explicit about scope

Vague requests lead to broad mutations. Be specific:

Too vague:

Update my products for better SEO

Better:

Update the meta description for product handle "classic-tee" to: "Premium cotton classic tee. Available in 5 colors. Free shipping on orders over $50."

3. Push themes as unpublished

The toolkit supports --unpublished for theme pushes, but you need to ask for it explicitly. It’s not enforced by default.

4. Use a .cursorrules file

Add a .cursorrules file to your Shopify project with Shopify-specific instructions:

When writing Shopify GraphQL:
- Always validate against the current Admin API schema
- Use the shopify-admin skill for API queries
- Default to read operations unless explicitly asked to mutate
- For mutations, always query current state first
- For theme pushes, always use --unpublished flag

5. Review generated mutations before execution

When Cursor generates a store mutation, read through it before approving. Check:

• Is it targeting the right product/resource?
• Is the scope of the change what you intended (1 product vs. all products)?
• Are existing field values being preserved or overwritten?

Limitations

These are structural to the toolkit, not Cursor-specific. For the full risk analysis, see our Shopify AI Toolkit overview.

1. No draft mode - Store mutations execute on your live store immediately
2. No preview - You can’t see what changes will look like before they happen
3. No undo/rollback - Changes are permanent once executed
4. No audit trail - No toolkit-level record of what was changed
5. Broad scopes - OAuth permissions apply to entire resource types, not individual items
6. Code sent to Shopify - Validation payloads include your code by default (opt out with OPT_OUT_INSTRUMENTATION=true)
7. Manual skills decay - Non-plugin installations need periodic manual updates

Quick reference

Summary

Cursor paired with the Shopify AI Toolkit is a strong combination for Shopify development. Cursor’s codebase awareness plus the toolkit’s documentation search and schema validation means less time fighting incorrect API references.

For development work - app building, theme creation, Hydrogen storefronts - it’s a clear productivity upgrade. For store operations, the governance gaps apply: no drafts, no preview, no undo, and code telemetry on by default. Be deliberate about what you enable.

For the full picture on risks and governance, read our Shopify AI Toolkit overview. For setup on other platforms, see our Claude Code guide and OpenAI Codex guide.

This article was last updated in April 2026 based on the Shopify Editions Winter 2026 release.