Create an OAuth app for Claude or Cursor

Sign in as the merchant, open /dashboard/developer, and choose Create app. Name the app after the client you will connect (Claude MCP, Cursor MCP, or a custom agent name).

Optional description helps you remember what the app is for later. Redirect URIs are required and must match the AI client’s callback exactly.

Built-in presets you can toggle: Claude — https://claude.ai/api/mcp/auth_callback ; Cursor local — http://localhost:8787/callback ; Cursor cloud — https://www.cursor.com/agents/mcp/oauth/callback . You can add more lines (one URI per line).

Other URIs you may need: Cursor legacy cursor://anysphere.cursor-mcp/oauth/callback , and local manual testing http://localhost:3000/callback . Only add what your client actually uses.

Click Create application. Copy Client ID and Client secret from the yellow one-time card before you leave the page. Store them in your password manager or the AI client’s secret field — not in git or shared docs.

In Claude or Cursor, add Ettajer as an OAuth / MCP connection using that client ID and secret. The authorize URL is /oauth/authorize (PKCE S256 required). Sign in as the same merchant and approve scopes for one store.

After consent, the app’s OAuth connections list shows Connected · your store name and the granted scopes. That grant permanently binds tokens to that store — agents must not send storeId; the API ignores client-supplied store IDs.

Recommended default scopes for theme AI: store:read, products:read, collections:read, settings:read, themes:read, themes:create, themes:write, themes:preview, pages:read, pages:write, media:read, media:write, navigation:read, navigation:write. Add themes:publish only if you want the agent to go live.

If authorization fails with redirect_uri errors, open the app and compare URIs character-by-character (scheme, host, path, trailing slash, port). See the article Fix MCP OAuth redirect mismatch.

Full OAuth reference: /developers/oauth . AI walkthrough: /developers/ai-integration .