Configuration
Add-ons > Manage add-ons > AI Agent Connector (MCP) > Settings
General
Section titled “General”| Setting | Default | What it does |
|---|---|---|
| Enable the MCP endpoint | On | Off: the endpoint answers HTTP 503 to every client. |
| Endpoint | The endpoint URL and a link to the connector page. | |
| Allow connector URLs with a key | On | Lets a connection use a secret URL that contains its token (for clients without custom headers). Each connection must also have the option. |
| Share customer contact data | On | With the customers.read scope the agent sees names, e-mails, phones and shipping addresses. Off: first names and masked e-mails only, for every connection. |
| Vendors manage their own connections | Off | Multi-Vendor only. Vendors get Seller tools > AI Agent Connector with their own connections, change requests and log. |
Limits
Section titled “Limits”| Setting | Default | What it does |
|---|---|---|
| Calls per minute per connection | 60 | Above this, HTTP 429 for 60 seconds. |
| Maximum rows per answer | 50 | Upper limit of the list tools (5 to 500). |
| Change requests expire after (days) | 7 | Older pending requests become Expired and cannot be approved. |
| Keep the activity log (days) | 30 | Older log rows are deleted automatically. |
Connections
Section titled “Connections”Website > AI Agent Connector > Connections > New connection
- Name: shown in the log and on change requests.
- Scopes: catalog.read (products, prices, stock, categories), orders.read, customers.read, reports.read (sales summary, best sellers), catalog.write (price, stock, status and text change requests), orders.write (order status change requests). The client sees only the tools its scopes allow.
- Vendor (Multi-Vendor, root administrator): limit the connection to one vendor. On CS-Cart Ultimate, select a storefront in the admin before you create the connection to limit it to that storefront.
- Expires: 30, 90 or 365 days, or never.
- Auto-approve changes: write requests are applied at once. They are still logged and checked against the old value. Leave it off unless you trust the agent and the prompts it receives.
- Connector URL with key: allows the secret URL for this connection.
The token is shown once. The store keeps only its SHA-256 hash. Revoke a connection to block it at once; a revoked connection can be activated again or deleted.