MCP Server Security for Ecommerce: OAuth 2.1, Token Scopes, and Stopping Rogue Agents

Every ecommerce store that exposes an MCP server to AI shopping agents is also exposing a potential attack surface. The Model Context Protocol specification, updated to version 2025-06-18 in June 2025, now mandates OAuth 2.1 authorization with scoped access tokens for any HTTP-based MCP server. That means if your store runs an MCP server without proper authentication, you are not just non-compliant with the spec. You are letting any AI agent that discovers your endpoint query your product catalog, read inventory levels, and potentially initiate checkout flows with no identity verification. ...

June 11, 2026 · 15 min · Shopti Team
Shopti article illustration

The Agentic Commerce Stack in 2026: What Every Ecommerce Store Needs to Accept AI-Driven Purchases

Most ecommerce stores cannot be purchased by AI agents because they are missing at least two layers of the agentic commerce stack: a machine-readable product data layer and a programmatic checkout interface. This is not a future problem. Stripe launched its official MCP server in early 2026 with OAuth support, OpenAI integrated browser-based purchasing directly into ChatGPT via its Computer-Using Agent, and Google AI Mode is surfacing direct product offers. Stores that build the full stack now will capture the first wave of agentic commerce revenue. ...

May 28, 2026 · 12 min · Shopti Team
Shopti article illustration

Agentic Payments Are Live: Is Your Ecommerce Store Ready to Be Purchased by AI?

AI agents can now buy products from your store without a human ever visiting your website. In April and May 2025, Visa, Mastercard, and PayPal each launched agentic payment platforms within weeks of each other, and Perplexity became the first AI search engine to complete end-to-end purchases through PayPal’s checkout. If your ecommerce store is not structured for AI agents to discover, evaluate, and purchase your products, you are already losing sales to competitors who are. ...

May 14, 2026 · 11 min · Shopti Team

What Is an MCP Server and Why Your Ecommerce Store Needs One

An MCP server is a standardized interface that lets AI agents talk to your store’s backend in real-time, querying products, checking inventory, and initiating actions without scraping your website or relying on proprietary APIs. For ecommerce, it means ChatGPT, Copilot, Perplexity, and every future AI shopping tool can interact with your catalog directly, accurately, and instantly. What Is the Model Context Protocol (MCP)? The Model Context Protocol is an open standard developed by Anthropic and released in late 2024. It defines how AI models connect to external data sources and tools. Think of it as USB for AI: a universal connector that lets any AI model plug into any service without custom integrations for each pair. ...

April 16, 2026 · 9 min · Shopti.ai