Connect Claude Code to your store

Mint a token in Settings and add Rabbot's MCP server to Claude Code with one command.

Updated 24 August 2026

What this gives you

Rabbot runs its own MCP server: nine tools an AI agent can call to ask about one store’s protection status. Point Claude Code at it and you can ask, in plain language, what is blocking a sale today, what Rabbot caught this month, or what happened to one product page over time. The agent gets Rabbot’s judgment about your store, not a raw dump of rows it has to interpret for itself.

Agent access is free on every plan, including the free one.

Step 1: mint a token

  1. Open Settings in your installed app.
  2. Find the Agent access (MCP) card.
  3. Choose Mint token.
  4. Copy the token straight away. It is shown once and never shown again.

If you lose it, mint another. Minting replaces the old token, so the previous one stops working. That is also how you rotate it on purpose.

Step 2: add the server to Claude Code

The Connect your agent box on the same card holds everything you need. The server URL is https://app.rabbot.ai/mcp, with a copy button beside it, and the header is Authorization: Bearer YOUR_TOKEN.

Run this in your terminal, with your own token in place of YOUR_TOKEN:

claude mcp add --transport http rabbot https://app.rabbot.ai/mcp --header "Authorization: Bearer YOUR_TOKEN"

Then ask Claude something like “what is blocking sales on my store right now”. If the connection is good, the answer comes back from your live store data instead of a guess.

What the token can and cannot do

The token is scoped to one store. Eight of the nine tools only read. The one tool that writes marks a finding as intentional so Rabbot stops raising it, and it refuses on anything that is blocking a sale, with two documented exceptions that can be intentional: a deliberate password gate or a custom purchase flow.

The token is separate from how you sign in to Shopify. It shares no path with your store connection, so revoking it costs you nothing else: choose Revoke token on the same card and the agent loses access at once.

Still stuck? Email support@rabbot.ai and a real person reads it.