Store platform

PrestaShop MCP Server (ps_mcp_server)

PrestaShop's official ps_mcp_server module exposes store functions to MCP clients and lets other modules declare their own tools, prompts and resources, for tasks such as product sheets, performance analysis and pricing support.

What it is and why it matters

What it does

• Expose store data and actions to AI assistants through MCP
• Let third-party modules add tools via a discovery contract (isMcpCompliant, PHP attributes)
• Developer stubs on Packagist (prestashop/ps-mcp-server-stubs) for building compliant modules
• Extend with add-ons such as MCP Tools Plus

Best for

PrestaShop 8+ merchants and agencies who want an official, extensible MCP layer on their own store.

How to connect it

1. Install the PrestaShop MCP Server module on your store as described in the vendor documentation's Installation page. Try it on a staging copy first if you have one.
2. Open the module's Configuration page. Confirm the MCP Server is enabled, and note the Server URL shown there. The only authentication mode is OAuth 2.0.
3. Open the Modules & Features page. Review each MCP-compliant module and switch off any tools, prompts or resources you do not need. Start with read-oriented features where you can.
4. Open the Members page and add the email address of each person who should have access. Assign the Viewer role (read-only) first. Give the Editor role (read and write) only to people doing supervised tasks.
5. Connect your AI application using the Server URL, following the vendor's 'Connect your AI application' page. If your client does not support OAuth, you can generate a token when adding the member. The documentation says it can be sent as a Bearer or Basic value in the Authorization header.
6. Copy any generated token straight away, because it is shown only once. Store it in a password manager. Then run a simple read-only question, such as listing recent orders, to confirm the connection works.

Exact commands and addresses change. Use the official documentation for the current steps.

Installation guide for PrestaShop MCP Server (ps_mcp_server)

Client-by-client steps, what to prepare, the first prompts to run and fixes for common errors.

ClaudeChatGPTGeminiMicrosoft CopilotPerplexityCursorClaude Code

→

Questions you can ask it

• List the ten most recently created products and tell me which ones are missing images.
• Show me yesterday's orders with their status and total, and flag any that are still unpaid.
• Draft an improved product sheet for this product using its current description, and show me the text before saving anything.
• Which customers placed more than one order this month? Summarise them in a table.

What it cannot do

• It does not run as a hosted service. You run it on your own PrestaShop store, so you are responsible for hosting, updates and uptime.
• It cannot offer a fixed list of tools beyond what is installed. The default tools cover products, product images, orders and customers, and anything else depends on which MCP-compliant modules you add.
• It does not let people in without authorisation. Only email addresses listed on the Members page can authenticate, so you must add each user yourself.

Staying safe

• Use the Viewer role by default. The Editor role gives full read and write access, so give it only to trusted people doing supervised work such as product edits, and review changes before relying on them.
• Treat generated tokens like passwords. A token is shown only once, and regenerating it immediately invalidates the old one, so any app still using the old token must be updated. Remove members who no longer need access.
• Never turn on the Disable Authentication option in the Developer Options page on a live store. It is locked by default, is meant only for local testing, and would leave your store open to anyone who can reach the server. Debug logs are written to the module's .mcp/logs folder, so keep that folder private and switch logging off when you finish troubleshooting.

Watch out for: Reported for PrestaShop 8 and later; authentication is OAuth 2.0 only. Confirm compatibility, the built-in tool list and permissions in the docs before use.

Frequently asked questions