Shop MCP OAuth returns access_denied before showing the consent screen

Authentication & Access
1

Hello,

I’m integrating Shop MCP into my application so customers can authorize access to their Shop account.

When I start the authorization flow, Shop redirects to my callback with access_denied before displaying a consent screen. The callback includes:

  • error: access_denied
  • error_description: Access denied
  • iss: https://accounts.shop.app
  • No authorization code was returned

The request uses scope openid personal_agent, resource https://mcp.shop.com, and PKCE with S256. My redirect URI is an HTTPS callback registered for the app’s OAuth client. The client ID is from the App in the dev dashboard.

Could you advise what would cause this client’s authorization to be denied before consent, and whether this client needs additional eligibility or configuration for Shop MCP?

I can provide the full client ID and redacted diagnostics privately if needed. Thank you advance for your help

2 Likes