Maho - The heart of ecommerce,the heart of your store.
The free open source ecommerce platform you actually own. Lean at the core, fully featured out of the box, and open to extend however you like. Self-hosted, with no fees skimming your margins and no vendor holding the keys.
Eleven storefront themes ship with Maho 26.9, light and dark included. Use the arrows to walk through the pages and the themes, scroll the page inside the window, hit the lightbulb for dark mode. Compare all eleven themes →
A completely redesigned admin, first-class dark mode included, shipped in Maho 26.7. Pick a screen, hit the lightbulb to flip the theme. Try it in the live demo →
Ready for agentic commerce
More and more of your traffic is an AI agent shopping on someone's behalf. Maho answers it with clean facts, gives you control over which agents get in, and lets your own agents run the store.
- Every page in markdown, on the same URL. A product answers with name, SKU, price, stock and options. A category answers with a product table. No navigation, no scripts, no guessing where the price is.
- llms.txt and robots.txt, generated per store. Agents find your pages, categories and search. You decide which AI crawlers get in, grouped by purpose, so you can stay in AI answers and still block training bots.
- An MCP server for your own agents. Paste the store URL into Claude, ChatGPT or any MCP client, log in to your admin, and the agent works with the store under the same permissions as the REST API.
Funded by the European Commission
This project is funded through the NGI TALER Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet program. Learn more at the NLnet project page.
Together with our sponsors and partners
Selling on Maho right now
Worldwide merchants run their storefronts on Maho.
For store owners
Run your store with enterprise features that actually help you sell more, without the enterprise price tag or complexity.
Smart Automation That Saves Time
Create rule-based customer segments and dynamic categories that update automatically. Target the right customers with personalized campaigns while products organize themselves based on rules you define. Spend less time on manual work, more time growing.
Email Automation That Works While You Sleep
Build multi-step email campaigns that trigger automatically based on customer behavior. Send personalized coupon codes, nurture leads, and re-engage customers with customizable delays between messages. GDPR-compliant tracking ensures you stay on the right side of privacy laws.
Marketing Tools Built Right In
Integrated blog module for content marketing and SEO, Meta Pixel for conversion tracking, professional SMTP email sending, and advanced payment method restrictions. Everything you need to market and sell strategically, no third-party plugins required.
1 click theme customizations
Eleven ready-made themes for fashion, food, electronics and more, each in light and dark. Change colors, fonts and more in the live theme editor and watch the storefront repaint in a live preview.
Social Login
Let customers sign in with Google, Apple and Facebook in one tap. Existing accounts are linked automatically, guest carts are merged, and 2FA still applies. Fewer forms means fewer abandoned carts.
Sell to Shoppers That Are Agents
AI agents shop on behalf of your customers. Maho answers them with clean product facts: name, price, stock and options, in markdown on the same URL. llms.txt shows them the way in, and a generated robots.txt lets you choose which AI crawlers to allow. No plugin, no setup.
Checkout That Converts
Modern minimal checkout layout, offcanvas navigation, and blazing-fast autocomplete search create a smooth shopping experience. Fast page loads mean happy customers and better conversion rates.
Professional Content Creation
Edit and optimize product images directly in the media library. Create beautiful product descriptions, CMS pages, and engaging slideshows with the modern TipTap editor - intuitive, powerful, and no external tools needed.
Accessibility Scanner Built In
Run WCAG audits straight from the admin with the built-in accessibility scanner. Every violation is outlined on a screenshot of your page, desktop and mobile, and mapped to the template that caused it. Scheduled scans and PDF export keep you compliant where accessibility is required by law.
Enterprise-Level Security
Protect your business with 2-factor authentication, passkey support for backend login, admin activity logging, GDPR-compliant captcha, and modern libsodium encryption. Sleep well knowing your store is secure.
Always Getting Better
Regular updates with real improvements like a brand-new storefront with eleven themes (26.9), social login (26.9), the accessibility scanner (26.9), a redesigned admin with dark mode (26.7), gift cards (26.1), and email automation (25.11). Maho evolves with your business needs.
For agencies
Deliver professional ecommerce solutions to clients with a platform that's proven, powerful, and cost-effective.
Client-Ready Platform
Clean, modern admin interface with professional features clients expect: media management, content editor, activity logs, and comprehensive reporting. Built-in blog and marketing tools, a WCAG accessibility scanner and an agent-ready storefront mean you deliver more value out of the box.
Fast Project Deployment
Docker support for consistent environments, environment variable configuration for easy setup, and modern development tools. Get client projects live faster with less friction.
Enterprise Features, Zero Licensing
Multi-store capabilities, advanced permissions, comprehensive APIs (REST, GraphQL, SOAP, MCP), and all the features enterprise clients demand. No per-client licensing fees, no SaaS subscriptions - pure profit margin.
Independent, Not Isolated
Maho stands on a battle-tested open-source foundation, hardened by real stores running in production. Active development, thorough documentation, and direct access to the maintainers mean you're never stuck.
Complete Documentation
Comprehensive API documentation (REST, GraphQL, SOAP), developer guides covering MVC, ORM, and architecture, plus AI-powered deep code documentation via DeepWiki. Onboard new team members quickly and reduce training costs.
On-Premises Control
Self-hosted means your clients own their data and you control the infrastructure. No vendor lock-in, no platform fees eating margins, no forced migrations. Perfect for clients with compliance requirements.
For developers
Build with a modern tech stack and clean architecture, no legacy baggage, just great developer experience.
Modern Tech Stack
PHP 8.3+ built on industry-standard libraries: Doctrine DBAL 4.4 for database operations, Symfony HttpClient for HTTP requests, Symfony Validator for data validation, Symfony Messenger for background jobs, and Monolog for logging. A storefront on Tailwind CSS 4 and daisyUI 5, vanilla JavaScript only throughout. Contemporary, actively-maintained dependencies you can trust.
Clean Architecture
Well-designed MVC pattern, powerful ORM with collections, event-driven system, and modular architecture. Code that makes sense, patterns you recognize, structure you can extend confidently.
Comprehensive APIs
Brand-new REST & GraphQL API built on API Platform, with JWT authentication, granular per-resource permissions, and OpenAPI docs, plus the legacy SOAP and XML-RPC APIs for older integrations.
MCP Server for AI Agents
A store-facing MCP server with OAuth 2.1 browser login: paste the store URL into Claude, ChatGPT or any MCP client and approve the connection. Tools are derived from the same ApiResource metadata as REST, so every resource, third-party ones included, becomes a tool with the same permissions, logging and rate limits. 200+ tools on a default install.
Great Developer Tools
CLI tool for common tasks, Composer plugin for module management, 5800+ icon library, theme build and scaffold commands with design tokens for theming, and environment-based configuration. Tools that actually improve your workflow.
Multi-Database Support
Choose the database that fits your infrastructure. MySQL, MariaDB, PostgreSQL, and SQLite are all supported through Doctrine DBAL, with automatic SQL dialect handling. Your code works across all engines without modification.
Actively Developed
Regular releases with substantial improvements - not just patches. Recent additions: a Tailwind CSS 4 storefront, an MCP server, a native job queue, OpenTelemetry observability, a declarative database schema system, the API Platform-based REST & GraphQL API, and the Doctrine DBAL database layer. Continuous modernization with real features that matter.
Extensible by Design
Module system for clean extensions, setup resources for database migrations, event observers for behavior modification, layout XML for frontend customization. Build what you need without fighting the framework.
Ready to build the future of your ecommerce?
Whether you're launching your first store, delivering client projects, or building custom solutions, Maho gives you the foundation to succeed.