Credentials. The MCP connection uses OAuth login and team API keys, so scope the granted permissions tightly and revoke unused connections.
Who it is forA merchant who wants an AI assistant to handle daily order and inventory work inside their own store.
The problemDaily order, stock and product updates take time in the dashboard, and the merchant wants an assistant to do them with permission checks.
The outcomeAn MCP-connected assistant that works on store data within the RBAC scopes you grant, with confirmation before sensitive changes.
What you need first
- Node.js 22.12+ and npm
- Wrangler CLI (npm install -g wrangler)
- A free Cloudflare account
- Carrier and Meta credentials if you connect delivery or ads (optional)
Steps
- Complete the local setup from the codflow-setup runbook so the dashboard and backend are running.
- In the dashboard, open MCP agent connection management and create a connection for your agent.
- Connect Cursor (or another supported MCP client) and complete the OAuth login relay from the dashboard.
- Ask the agent to list recent orders, and confirm any write action it proposes through the elicitation prompt.
Prompt for your agent
Using the MCP connection from the CodFlow repo at https://github.com/bighadj22/codflow, list the 10 most recent orders in the store at <store URL>. Expected output: a table of order ID, status and total. Verify that the agent did not change any order status.
Caveat. The README lists Claude, Cursor, ChatGPT and LibreChat as compatible, but the exact MCP endpoint setup for each client is not described in the README.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for bighadj22/codflow and "Let an AI agent manage store orders through MCP"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer