The MCP server Pro
Pro's MCP server lets any MCP-capable assistant use your store with the customer's sign-in. Its address, its tools, and what customers do to connect.
Updated October 12, 2026
Agent Adapt Pro is opening soon. See pricing for early access.
Many AI assistants can use tools from an MCP server (Model Context Protocol). With Pro, your store runs one at:
https://your-store/agent-adapt/mcp
There is nothing to switch on or configure. The server is listed in your store’s poppy.json, so agents that follow the Personal Agent Protocol find it, and a customer can add the address to any assistant that accepts custom MCP connectors.
How a customer connects
- In their assistant, they add a custom connector with your store’s MCP address.
- The assistant sends them to your store’s sign-in and approval page, the same one described in How customers connect their assistant.
- Once they allow it, the assistant can use your store’s tools for them.
They get the usual connection email, and the assistant appears in My Account → Connected agents and in WooCommerce → Agents, where you can block it or cap its access like any other agent.
Tools
The tools are the same actions as the agent API, under the same permissions and the same policy:
- Shopping:
catalog_search,catalog_product,store_policies,cart_view,cart_add,cart_update,cart_remove,cart_coupon,cart_uncoupon,cart_handoff - Account:
orders_list,orders_get,orders_reorder,orders_cancel_unpaid,account_addresses - Pro actions:
orders_cancel_paid,returns_request,account_addresses_update
An action you switch off in Merchant policy disappears from the list.
Most MCP assistants don’t yet support operations (see Approvals for changes), so through them, paid cancellations, returns and address changes are refused with an explanation. Unpaid orders are cancelled directly.
What your store needs
The same as any agent: HTTPS, WordPress at the root of your domain, the Authorization header reaching PHP, and /.well-known/ and /agent-adapt/ not cached or blocked. Site Health checks all four.
Each visit is limited to 300 requests a minute, shared with the agent API.
Still stuck? Email [email protected].