Supported agents
Claude Code
claude mcp add or .mcp.json.OpenAI Codex CLI
.codex/config.toml.OpenCode
opencode.json.Gemini CLI
gemini mcp add or .gemini/settings.json.Cursor
.cursor/mcp.json.Built-in agent
In the cloud, nothing to install.
Windsurf: in Cascade → MCP → “Open MCP config file” paste the configuration (
serverUrl + header Authorization: Bearer ${env:ITEMSHOP_TOKEN}); Windsurf must see the ITEMSHOP_TOKEN variable.
Aider does not support MCP. It works on local files: start it with the project rules (aider --read CONVENTIONS.md, or let .aider.conf.yml with read: [CONVENTIONS.md] do it) and send changes with npx itemshop deploy.
Connecting step by step
1
Pick an agent
Workspace → Agent → choose an agent from the list. The panel shows the steps, files and commands for it.
2
Create a token
In Workspace → MCP (or in the Agent tab) create a token with the scopes you need, e.g.
site:write and catalog:read. You see the token only once.3
Copy the configuration
The panel generates a ready command or file in your agent’s format plus an instructions file. You can also download everything as a zip bundle (configuration, instructions,
.env.itemshop.example and ITEMSHOP-SETUP.md).4
Pull the project and start
The token never goes into generated files. Each format refers to the
ITEMSHOP_TOKEN variable using its tool’s own syntax (${ITEMSHOP_TOKEN}, ${env:ITEMSHOP_TOKEN}, {env:ITEMSHOP_TOKEN}, bearer_token_env_var), so you can commit the files.itemshop login the CLI fetches the configuration from your workspace; without logging in it prints an offline version with the default MCP address. --token <t> embeds a literal token instead of the variable reference.
Security
- The agent only sees tools from the groups you enabled in Workspace → MCP, and only within the token’s scope (read or write).
- Orders are read-only and off by default.
- File changes land in the draft — they reach production after your approval (unless you change the publishing rules).
- Every tool call is visible in the MCP log and on the activity timeline. You can revoke the token at any time, and it also stops working when its creator loses permissions.
MCP
Tools, scopes and the stdio bridge.
Agent skills
Ready-made ItemShop knowledge for your agent.