Checkout MCP and Cart MCP now support UCP buyer consent
Update8 days agoUnverifiedAdded Oct 17, 2026
Checkout MCP and Cart MCP now support the UCP buyer consent extension ( dev.ucp.shopping.buyer_consent ) starting with UCP 2026-08-25 . Buyers can now make the same privacy and marketing choices in your agent that they'd make in a shop's own checkout, like opting in to email or SMS. Shops receive those choices with the cart, checkout, and order.
Topics: AI agents, MCP, Governance, Developer tools
More Shopify developer platform releases
Every Shopify developer platform releaseCheckout footer visibility now applies to merchant-configurable content
The visibility fields on CheckoutBrandingFooterContent and CheckoutAndAccountsConfigurationBrandingFooterContent now control only merchant-configurable footer content. Checkout can display Shopify-provided transaction information in the footer regardless of this setting.
Build with confidence: Shopify AI Toolkit's security check
Shopify AI Toolkit now includes shopify app security check , a security command that checks your app for common vulnerabilities before you ship. You can run it before you submit an app, and on every release, to find problems in your own code and get guidance to fix them.
Hydrogen 2026-10 is now available
The new Hydrogen is generally available today. Since the developer preview started in June, we've shipped seven releases based on feedback from developers using it. The big deal about the new Hydrogen is that it isn't a big deal: Hydrogen now works with any JavaScript framework.
Exclusive > timestamp filters exclude the full second
As of API version 2026-10 , an exclusive lower bound ( > ) on a timestamp filter in the GraphQL Admin API search syntax excludes the full second. For example, created_at:>'2026-09-15T12:00:02Z' no longer returns an order created at 12:00:02.500 .
Add shopping and Shop Pay checkout to any agent with Shop MCP
Shop MCP lets your agent or app search Shopify Catalog, build carts, and complete Shop Pay checkout through a single MCP connection. It works with over 1 billion products in Shopify Catalog and doesn't require an API key for search. Nothing changes for existing Catalog API integrations, and no action is required.
Metaobject analytics queryable capability available in the Admin API
Starting with GraphQL Admin API version 2027-01 , you can read and configure the analyticsQueryable capability on metaobject definitions. This applies to apps that create, update, or inspect metaobject definitions. No action is required unless you want your app to control whether a metaobject definition can be queried in analytics.
Securing your app, together
Merchants install your app because they trust it, and because they trust the Shopify App Store. There are bad actors out there who are motivated to exploit that trust. Alongside the rest of the industry, we are seeing the number of attacks increasing across the app ecosystem as AI gets better at finding vulnerabilities.
Detect when a POS extension screen finishes navigating
What changed The POS Navigation API adds the navigatesuccess event. It fires after the destination screen finishes its native transition, and its callback receives a standard Event. currententrychange can fire before the screen finishes appearing, and the navigate() promise doesn’t wait for the transition.
Also shipped on Oct 16, 2026
Shopify in October 20262026.10.08
Make a voice you already have speak another language or accent, with the same speaker. Call POST /voice-generator/localize on a flagship or custom voice, pick an accent, and get candidates back in seconds to audition and convert like Voice Design candidates. GET /voice-generator/available-accents lists the accents you can target.
Neon Realtime in public beta, new AI Gateway models, Stripe real-time sync, CJK search in Lakebase Search, and more release - Oct 16, 2026
Neon Realtime is in public beta. Neon now has realtime, built by the team behind Electric. Neon Realtime turns any SQL query into a live query. Subscribe to it ...
TypeSafe AI Jev 1.14.0 is now available on Unity Gateway
TypeSafe AI Jev 1.14.0 is now available on Unity Gateway. TypeSafe AI hosts it, and an account admin must enable the Externally-hosted TypeSafe AI Models preview. TypeSafe's terms govern its use.
Gemini Enterprise: Configure citations for custom MCP data stores
You can configure the citation_mappings parameter for custom Model Context Protocol (MCP) data stores using the REST API to display source citation chips when Gemini Enterprise answers questions using tools on your custom MCP server. This feature is generally available (GA). For more information, see Configure citations for custom MCP data stores .
[In preview] Public Preview: Azure Databricks Private network gateway
Private network gateway for Azure Databricks is now in Public Preview, enabling serverless compute to connect to resources in your virtual network (VNet) and transitively connected networks through a single managed gateway. Customers can use the gateway t
Cloud Agent Canvases and Environment Improvements
Canvases from cloud agents Cloud agents can now build interactive canvases as part of their work. Share a finished canvas with your team by sending its link. Learn more about sharing canvases . Environments API The Environments API is now available in beta. Use it to programmatically create and manage the cloud environments your agents run in.