WebMCP tool reference
The WebMCP tools that platforms distribute to many sites at once, with what each one declares. Every tool here comes from a tool set we could attribute to a named vendor and whose distributed bundle we read. We never invoke a tool.
| Tool | Vendor | Sites | Read-only hint |
|---|---|---|---|
browse_store | Shopify | 99,664 | not read-only |
cancel_cart | Shopify | 99,664 | not read-only |
get_cart | Shopify | 99,664 | declared read-only |
get_product | Shopify | 99,664 | not read-only |
manage_orders | Shopify | 99,664 | not read-only |
proceed_to_checkout | Shopify | 99,664 | not read-only |
search_catalog | Shopify | 99,664 | declared read-only |
search_shop_policies_and_faqs | Shopify | 99,664 | declared read-only |
show_variant | Shopify | 99,664 | not read-only |
add_to_cart | Shopify | 95,582 | not read-only |
update_cart_lines | Shopify | 95,582 | not read-only |
get_ucp_profile | Shopify | 31,153 | declared read-only |
update_cart | Shopify | 4,082 | not read-only |
Counts are from the sealed file 2026-10-11 and do not change. A declaration is not a vulnerability; these are measured indicators, not audits. See What is WebMCP? and what a tool declares and what a crawler cannot see.