MCP Server Security for Ecommerce: OAuth 2.1, Token Scopes, and Stopping Rogue Agents

Every ecommerce store that exposes an MCP server to AI shopping agents is also exposing a potential attack surface. The Model Context Protocol specification, updated to version 2025-06-18 in June 2025, now mandates OAuth 2.1 authorization with scoped access tokens for any HTTP-based MCP server. That means if your store runs an MCP server without proper authentication, you are not just non-compliant with the spec. You are letting any AI agent that discovers your endpoint query your product catalog, read inventory levels, and potentially initiate checkout flows with no identity verification. ...

June 11, 2026 · 15 min · Shopti Team
Shopti article illustration

Review Schema for AI Shopping Agents: How AggregateRating Markup Determines What ChatGPT and Google Recommend

Review and AggregateRating structured data is the single strongest trust signal AI shopping agents use to decide which products to recommend and which to ignore. When ChatGPT, Google AI Mode, or Perplexity compare products side by side, the presence of verifiable review counts, star ratings, and individual Review markup is what separates the product that gets cited from the one that gets dropped. Most ecommerce stores implement review schema incorrectly or incompletely. They embed AggregateRating on product pages but omit the Review items. They hardcode fake ratings. They nest review data in the wrong position in their JSON-LD. The result: AI agents see the rating but cannot verify it, so they deprioritize the product in their recommendations. ...

June 8, 2026 · 15 min · Shopti.ai
Shopti article illustration

AI Agent Regulation Is Coming for Ecommerce: What the EU AI Act, DSA, and Emerging US Laws Mean for Your Store

AI shopping agents that recommend, compare, and buy products on behalf of consumers are now subject to three overlapping regulatory frameworks in 2026: the EU AI Act transparency obligations (effective August 2025), the Digital Services Act (fully enforced since early 2025), and a patchwork of US state-level AI commerce laws. Ecommerce stores that serve EU customers or work with AI agent platforms must understand these rules, because non-compliance penalties range up to 3% of global annual turnover under the AI Act alone. ...

June 7, 2026 · 12 min · Shopti Team
Shopti article illustration comparing server-side and client-side rendering for AI agent content extraction

How Your Ecommerce Platform Rendering Determines What AI Agents Can See

Shopify Liquid and WooCommerce PHP render full HTML on the server, meaning AI agents like ChatGPT, Perplexity, and Google Gemini read your product data immediately on the first request. Headless React and Next.js storefronts often send an empty JavaScript shell instead, forcing AI crawlers to execute JavaScript before they see anything. That rendering difference is the single biggest technical factor determining whether your products appear in AI shopping recommendations. This is not about schema markup or structured data feeds. Those are separate layers. This is about the HTML that arrives when an AI agent requests your product page. If the HTML contains your product name, price, description, and images in plain text, the agent reads it. If the HTML contains a <div id="root"></div> and a JavaScript bundle, the agent may never see your products at all. ...

June 2, 2026 · 15 min · Shopti.ai
Shopti article illustration

Product Variant Schema for AI Agents: How to Make ChatGPT Recommend the Right Size, Color, and Style

AI shopping agents recommend the wrong variant 68% of the time when your product pages use identical schema markup for every size, color, and material option. A customer asks ChatGPT for “running shoes size 10 wide” and gets linked to your generic product page with no size selector, no stock indication, and no path to the correct SKU. The agent cannot differentiate because your structured data does not. This is the single most overlooked schema problem in ecommerce. Stores invest heavily in Product markup, GTIN identifiers, and review schema, but leave variant data as an afterthought. The result: AI agents surface your products but cannot match them to specific customer intent, which means lost conversions and lower citation rates compared to competitors who mark up variants correctly. ...

June 1, 2026 · 15 min · Shopti.ai
Shopti article illustration showing schema stack layers for AI agent discoverability

The Complete Schema Stack for AI Agent Discoverability: 7 Types Beyond Product Markup

Most ecommerce stores implement Product schema and stop there. That single-type approach covers maybe 30% of what AI shopping agents actually parse when they crawl your store. The remaining 70% comes from the schema types most stores never add: Organization, BreadcrumbList, FAQPage, ItemList, AggregateRating, MerchantReturnPolicy, and WebSite with SearchAction. Together, these form the complete schema stack that ChatGPT, Google AI Mode, Perplexity, and other AI agents use to decide whether to recommend your products. ...

June 1, 2026 · 16 min · Shopti.ai
Shopti article illustration

The Agentic Commerce Stack in 2026: What Every Ecommerce Store Needs to Accept AI-Driven Purchases

Most ecommerce stores cannot be purchased by AI agents because they are missing at least two layers of the agentic commerce stack: a machine-readable product data layer and a programmatic checkout interface. This is not a future problem. Stripe launched its official MCP server in early 2026 with OAuth support, OpenAI integrated browser-based purchasing directly into ChatGPT via its Computer-Using Agent, and Google AI Mode is surfacing direct product offers. Stores that build the full stack now will capture the first wave of agentic commerce revenue. ...

May 28, 2026 · 12 min · Shopti Team
Shopti article illustration

How AI Shopping Agents Compare Products: The Content That Gets Cited and the Content That Gets Ignored

AI shopping agents compare products by extracting structured attributes like price, specifications, ratings, and availability from HTML tables, schema markup, and clearly formatted spec sections. They do not parse marketing paragraphs to find that your blender has a 1200W motor. If the wattage is not in a table, a list, or a schema field, the agent likely does not know it exists. This distinction matters because product comparison queries are the highest-intent searches in ecommerce. When someone asks ChatGPT “what is the best espresso machine under $500” or types “compare iPhone 16 vs Samsung S25” into Perplexity, the AI is building a comparison table from extractable data. Products with structured, machine-readable content win the citation. Products with prose-heavy descriptions lose. ...

May 27, 2026 · 13 min · Shopti Team
Shopti article illustration

Ecommerce Platform APIs for AI Agent Access: Shopify, BigCommerce, and WooCommerce Compared

AI shopping agents from ChatGPT, Perplexity, Google Gemini, and Claude read your store through APIs and structured data, not through your storefront design. Shopify, BigCommerce, and WooCommerce each expose product data through fundamentally different API architectures, and those differences directly determine whether your products show up in AI recommendations. This comparison covers what each platform’s API actually returns, what AI agents need to make purchase recommendations, and where the gaps are that store owners must fix manually. ...

May 26, 2026 · 15 min · Shopti.ai
Shopti article illustration

Product Identifiers in Schema Markup: How GTIN, SKU, and MPN Determine AI Agent Visibility

Product identifiers like GTIN, SKU, and MPN in your structured data are the primary mechanism AI shopping agents use to match your products across stores, deduplicate listings, and surface the right offer in a recommendation. Without them, your products are name-matched at best and invisible at worst. When ChatGPT compares prices for “Sony WH-1000XM5 headphones,” it needs to know that the product on your store is the same Sony WH-1000XM5 on Amazon, Best Buy, and six other retailers. That matching happens through product identifiers encoded in schema markup, not through product titles or descriptions. If your Product schema lacks a GTIN, the agent cannot confidently link your listing to the canonical product, and you drop out of the comparison. ...

May 25, 2026 · 12 min · Shopti.ai