Backstop

Get started

Point your agent at Backstop instead of the native MCP server, and every write becomes undoable. Four steps — no call required.

Pick a platform

Each platform has its own undoable MCP endpoint. Browse the directory to see the exact tools:

HubSpot — CRM objects
Shopify — products & inventory

Add the endpoint to your MCP client

Drop this into your client config with your bearer token:

{
  "mcpServers": {
    "backstop-shopify": {
      "url": "https://getbackstop.co/api/mcp/shopify",
      "headers": { "Authorization": "Bearer <YOUR_TOKEN>" }
    }
  }
}

New connections start in shadow mode: writes are journaled and undo is previewed but not executed — so you can watch the agent before trusting it. Flip to protecting in the console when ready.

Let the agent write — then preview

Your agent calls the mirrored tools exactly as before (e.g. product_create, crm_update_object). Before any risky write, backstop_preview shows the blast radius, side effects, and reversibility. Every write is journaled automatically.

Undo — and audit

Call backstop_undo with the session id to roll back, with conflict detection. Watch it happen in the console: the three-column diff, the outcome of each action, the exposure impact, and a one-click undo. Export the audit as JSON, CSV, or PDF.

Open the console →

Full details in the docs — scopes, and exactly what undo covers and what it refuses.