Checkout MCP authentication issue

Agentic Commerce
1

I tested Checkout MCP both with and without authentication:

  • Without an Authorization header, create_checkout works successfully.
  • With an authenticated bearer token, the same request fails with HTTP 401 and AuthenticationFailed.

I tested two token types:

  1. A token created through the Dev Dashboard Catalogs flow. It contains:

    • read_global_api_catalog_search
    • write_global_api_app_events

  2. A token created using credentials from a newly created app. It contains:

    • write_global_api_app_events

Both tokens were minted successfully using the documented client-credentials endpoint:

POST https://api.shopify.com/auth/access_token

However, Checkout MCP rejects both authenticated requests. Removing the bearer token makes the identical request succeed.

Could you confirm what app configuration or token claim is required for authenticated Checkout MCP access?