Docs

Connect Vigil to Claude, ChatGPT, or Cursor

Vigil has a Model Context Protocol (MCP) server. An AI client can scan your Shopify store, read the live storefront, and, if you allow it, turn a risky script off. You sign in with your store. You do not copy a token.

MCP server URL: https://cp.appnary.com/api/vigil/mcp

Vigil is in beta. You need Vigil installed on the store and staff access to that store. Join the waitlist on the Vigil page to get access.

Connect with sign-in (recommended)

Use this for Claude and ChatGPT connectors and for Cursor. The client registers itself, then opens a Shopify sign-in. Menu names change, so if they differ, look for custom connectors or an MCP server and paste the URL.

Claude: Settings, then Connectors, then add a custom connector. Paste the MCP server URL.
ChatGPT: Settings, then Connectors. Add a custom MCP connector with the URL. Developer mode may be needed on your plan.
Cursor: add this to ~/.cursor/mcp.json. Cursor opens the sign-in the first time it connects.

{
  "mcpServers": {
    "vigil": {
      "url": "https://cp.appnary.com/api/vigil/mcp"
    }
  }
}

Your browser opens Shopify, which uses the store you are signed in to. Then Vigil shows the store, the client, and the turn-off choice. Turn-off is off unless you tick it. Wrong store? Click Choose another store and enter its myshopify.com domain.

Bearer token fallback

If a client cannot sign in, create an agent token in Vigil, on the Agent page. The token is shown once. Creating a new token stops the old one. Send it as a header:

{
  "mcpServers": {
    "vigil": {
      "url": "https://cp.appnary.com/api/vigil/mcp",
      "headers": { "Authorization": "Bearer YOUR_TOKEN" }
    }
  }
}

Tools

Tool	What it does	Access	Limit
scan_store	Scan the theme, app embeds, live storefront scripts, and change history.	Read	10 per minute
warm_live_page	Upload storefront HTML you fetched yourself, when Shopify rate-limits the live scan.	Read	5 per minute
list_blocked_hosts	List the hosts Vigil currently blocks on the storefront.	Read	No limit
block_host	Turn off a script host on the storefront (same as Turn off in Vigil).	Turn off	20 per minute
unblock_host	Turn a blocked host back on (same as Undo in Vigil).	Turn off	20 per minute

Read-only by default

A new connection, or a new token, can read and scan but cannot change the storefront. To let it turn a script off, tick Allow turn off during sign-in, or on the Agent page when you create a token. If an agent tries block_host or unblock_hostwithout that permission, it gets a message that says where to enable it.

Rate limits

Limits apply per connection or token, per minute, as listed above. Past the limit, the server returns HTTP 429 with a Retry-After header and a message with the seconds to wait. A well-behaved client waits and retries once.

Revoke a connection

In Vigil, open Agent, then Connected apps, then Revoke. Access stops at once. Uninstalling Vigil deletes every token and connection for the store.

Security notes

Tokens are stored hashed. Vigil never shows a token again after it is created.
Each token and connection works for one store only.
Vigil asks Shopify for theme read access only. It reads no customer or order records. It keeps only the name or email of the staff member who connects a client.