Why this exists. The questions you have about a shop cut across its screens. Which products are low on stock? Which are live with no price? Which orders have sat at Confirmed for a fortnight? VirtueMart stores all of that, but its admin is one long form per product and one list per type of record, so answering means filtering and counting by hand.

What the AI can do. 48 tools in 10 groups:

• Products (10): list with filters, read, create, update, delete, publish or unpublish, set categories and manufacturers, and read or write one language's text.
• Categories (5): list, read, create, update and delete.
• Manufacturers (4): list, read, create and update.
• Pricing (4): list a product's prices, set or delete one price row, and read the calculation rules.
• Inventory (2): read stock across the catalog with low-stock filters, and set one product's stock.
• Orders (5): list, read with line items, change status, read history, and list your statuses.
• Customers (4): read customers, list shopper groups, and move a customer between groups.
• Store reference (4): vendors, currencies, countries and states.
• Reviews (4): list reviews and ratings, approve or unapprove a review, and delete one.
• Diagnostics (6): version, a health check, a language-table audit, reading settings, and a read-only table viewer.

Every tool describes itself to the AI app, so there's nothing to configure. Ask in plain language: "What's under five in stock?" or "Move order 1042 to Shipped."

Saves that delete what you didn't send. VirtueMart's product save expects a complete admin form. Anything missing counts as removed, so a save that only changes a name also deletes that product's prices, categories and custom fields. No tool here hands VirtueMart a partial save: each one changes only what you asked for, and prices, categories and manufacturers have their own tools.

Products that exist but aren't there. A product's name lives in a separate language table. If that row is missing, the product vanishes from the shop and the admin list, and nothing reports it. The language-table audit finds these in one read-only call.

Order status changes go through VirtueMart's own routine, so stock, order history and invoices follow as they would in the admin. Customer email is your choice on each change.

Permissions. The AI can never do more than the Joomla account it acts for could do in VirtueMart itself. On top of MCP for J's Use and Write permissions, every tool needs VirtueMart's Access Administration Interface permission and the permission for that job, such as Product edit or Order status change. Read-only mode in MCP for J limits it to the reading tools. Joomla's text filters for the account apply to names, descriptions and custom titles, as they do in VirtueMart's own forms, and plain-text fields refuse HTML.

What it leaves alone. There's no file or image upload, and no tool writes VirtueMart's settings, because its settings save resets everything it wasn't given. Orders can be read and moved between statuses, but not created. Guest order passwords and payment gateway keys are never returned, and they can't be used to filter or sort.

Getting it. You need CS MCP for J and VirtueMart. Install it from Components → MCP for J → Browse MCP Add-ons or with the downloaded ZIP.

Tested on Joomla 5.4 with VirtueMart 4.8.4: all 48 tools called with the writes checked in the database, and the permission checks with Super User, Administrator and Manager accounts on every tool. VirtueMart has one edition, so there's no Pro version to test against.

Joomla 5, PHP 8.2+. GPL-2.0-or-later.

Current release: 1.0.4
Documentation: https://docs.cybersalt.com/extensions/mcp-for-virtuemart
Changelog: https://docs.cybersalt.com/extensions/mcp-for-virtuemart/changelog