Manage a Shopify store from Grok Bot when “verify Human” blocks the browser

Shopify’s anti-bot check can stop the Agent Computer browser on “verify Human” (or a similar CAPTCHA). Cursor staff (Colin, Sep 4, 2026) said the browser path is getting flagged, and a proper merchant connection is the fix — the team is looking at a first-party Shopify connector for Grok Bot. Until that ships, staff’s workable path is Shopify Admin API + a community Shopify Admin MCP through Settings → Plugins, so the Bot talks to Shopify’s API and skips the login page.

Why the browser path fails

1. Ask the Bot to open your Shopify admin or store login in its computer browser.
2. Shopify challenges the session with a human check.
3. Fighting the CAPTCHA from the Agent Computer is unreliable; staff said not to treat that as the long-term path.

This is distinct from Use Grok Bot on a website that has no connector: for Shopify, the browser itself is blocked by the merchant check.

Use Admin API + Plugins (staff interim)

Staff (Colin quoting the earlier Shopify login thread) outlined this shape:

1. In Shopify admin, open Settings → Apps and sales channels → Develop apps.
2. Create a custom app, grant the Admin API scopes you need, install the app, and copy the Admin API access token.
3. In Grok Bot, open Settings → Plugins.
4. Add a community Shopify Admin MCP server that accepts that token (staff pointed at community servers; pick one you trust and read its install notes).
5. Authenticate / paste the token only through the plugin’s secure path. Keep it out of ordinary chat.
6. Ask the Bot to manage products, orders, or customer email via the MCP tools, not by logging into admin.shopify.com in the browser.

Treat the access token like a password. Scope it narrowly and revoke it in Shopify if it leaks.

First-party connector status

Staff said a Shopify connector for Grok Bot is under consideration. There is no ETA in the Sep 4 reply. Catalog search returning nothing for “Shopify” matches that missing-connector state.

Pitfalls

• Pasting your Shopify password into chat will not clear “verify Human.”
• A grok.com connector (if one appears later) is a different surface from Bot Plugins until staff say otherwise.
• Distinct from Connect Plaid or a bank feed in Grok Bot: different data source, same class of “use Plugins / Marketplace while first-party is missing.”