Connect
Optimize
Secure
Live 45 Actions
ShipStation MCP Server
for AI Agents
Connect your AI agent to StackOne's ShipStation MCP server and give it 45 MCP tools out of the box. Auth, tool execution, and security all managed.
ShipStation MCP Server
Built by 
StackOne
StackOne 
Coverage
45 Agent Actions
Create, read, update, and delete across ShipStation — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your ShipStation MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every ShipStation tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every ShipStation call.
Tools Discovery →What is the ShipStation MCP Server?
A ShipStation MCP server lets AI agents read and write ShipStation data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's ShipStation MCP server ships with 45 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All ShipStation MCP Tools
Every action from ShipStation's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Carriers
- List Carriers
List all shipping carriers connected to the account
- Get Carrier
Retrieve a single carrier by carrierCode
Customers
- List Customers
Retrieve a paginated list of customers
- Get Customer
Retrieve a single customer by ID
Orders
- List Orders
List orders matching search criteria
- Get Order
Retrieve a single order by ID
- Delete Order
Soft-delete an order
Products
- List Products
Retrieve a paginated list of products
- Get Product
Retrieve a single product by ID
- Update Product
Update an existing product
Stores
- List Stores
List all stores associated with the ShipStation account
- Get Store
Retrieve details for a specific store by ID
- Update Store
Update an existing store
Warehouses
- Create Warehouse
Create a new warehouse (Ship From Location)
- List Warehouses
List all Ship From Locations (warehouses) on the ShipStation account
- Get Warehouse
Retrieve a single warehouse (Ship From Location) by its ID
- Update Warehouse
Update an existing warehouse (Ship From Location)
- Delete Warehouse
Delete a warehouse (Ship From Location)
Other (27)
- Add Carrier Funds
Add funds to a carrier account
- Create Or Update Order
Create a new order or update an existing one
- Create Or Update Multiple Orders
Create or update multiple orders in a single call
- Add Tag To Order
Add a tag to an order
- Create Label For Order
Create a shipping label for an existing order
- Create Shipping Label
Create a shipping label and obtain label data
- List Account Tags
List all tags defined for this account
- List Carrier Packages
List package types available for a specific carrier
- List Carrier Services
List shipping services available for a specific carrier
- List Fulfillments
Retrieve a paginated list of fulfillments
- List Orders By Tag
List orders matching a status and a tag
- List Shipments
Retrieve a paginated list of shipments
- Get Shipping Rates
Retrieve shipping rates for the specified shipping details
- List Store Marketplaces
List marketplaces that can be integrated with ShipStation
- Get Store Refresh Status
Retrieve the refresh status of a specific store
- List Users
Retrieve a list of users in the ShipStation account
- Remove Tag From Order
Remove a tag from an order
- Register Account
Register a new ShipStation account
- Mark Order As Shipped
Mark an order as shipped without creating a label
- Assign User To Order
Assign a user to one or more orders
- Unassign User From Order
Unassign the user from one or more orders
- Hold Order Until
Place an order on hold until a specified date
- Restore Order From Hold
Restore an on-hold order to awaiting shipment
- Void Label
Void a previously created shipping label
- Refresh Store
Initiate a store refresh
- Deactivate Store
Deactivate a specific store
- Reactivate Store
Reactivate a previously deactivated store
Set Up Your ShipStation MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to ShipStation in under 10 lines of code.
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}Check More Commerce MCP Servers
Klaviyo
162+ actions
Stripe
133+ actions
Magento
128+ actions
Square
125+ actions
BigCommerce
120+ actions
Shopify
85+ actions
Eventbrite
83+ actions
Platform Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
ShipStation MCP Server FAQ
Does StackOne have a ShipStation MCP server?
Yes. StackOne offers a hosted ShipStation MCP server with 45 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.
ShipStation MCP server vs direct API integration — what's the difference?
A ShipStation MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling ShipStation. A ShipStation MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling ShipStation at runtime. StackOne provides both.
How does ShipStation authentication work for AI agents?
ShipStation authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own ShipStation account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via
origin_owner_id.Are ShipStation MCP tools vulnerable to prompt injection?
Yes — ShipStation MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a ShipStation agent and how do I avoid it?
Context bloat happens when ShipStation tool schemas and API responses eat your ShipStation agent's memory, preventing it from reasoning effectively. A single ShipStation query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my ShipStation agent can access?
Yes — you can limit which actions your ShipStation agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my ShipStation MCP server?
Yes — you can create custom agent actions for your ShipStation MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research ShipStation's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a ShipStation MCP server?
Skip a ShipStation MCP server if your integration is purely software-to-software — direct ShipStation API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call ShipStation actions at runtime.
What AI frameworks and AI clients does the StackOne ShipStation MCP server support?
The StackOne ShipStation MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.