Maho - The heart of ecommerce,the heart of your store.
The free open source ecommerce platform you actually own. Lean at the core, fully featured out of the box, and open to extend however you like. Self-hosted, with no fees skimming your margins and no vendor holding the keys.
Most platforms sell these as paid add-ons. Maho has them in the core, from an accessibility scanner and a storefront ready for AI agents to eleven industry themes, a page builder, passkeys, product feeds and email automation.
PHP 8.5+, Symfony 8.1+ and Tailwind CSS 4, with no legacy JavaScript framework. REST, GraphQL and an MCP server for AI agents are in the core. Modules and events extend it without core edits.
One docker run to try it, one composer create-project to start your own store. Official Docker images, the maho CLI, a Composer plugin and a PHPStan plugin, all made by the Maho team. No account, no signup, no meter running.
Your code, your data, your server, your keys. Open source under OSL-3.0, on any host in any country you pick. No license fee, no revenue share, and no vendor that can switch your store off.
10 + 1 professionally curated, industry-focused themes
Ready for agentic commerce
More and more of your traffic is an AI agent shopping on someone's behalf. Maho answers it with clean facts, gives you control over which agents get in, and lets your own agents run the store.
- Every page in markdown, on the same URL. A product answers with name, SKU, price, stock and options. A category answers with a product table. No navigation, no scripts, no guessing where the price is.
- llms.txt and robots.txt, generated per store. Agents find your pages, categories and search. You decide which AI crawlers get in, grouped by purpose, so you can stay in AI answers and still block training bots.
- An MCP server for your own agents. Paste the store URL into Claude, ChatGPT or any MCP client, log in to your admin, and the agent works with the store under the same permissions as the REST API.
Funded by the European Commission
This project is funded through the NGI TALER Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet program. Learn more at the NLnet project page.
Together with our sponsors and partners
Selling on Maho right now
Worldwide merchants run their storefronts on Maho.
For store owners
Run your store with enterprise features that actually help you sell more, without the enterprise price tag or complexity.
Smart Automation That Saves Time
Create rule-based customer segments and dynamic categories that update automatically. Target the right customers with personalized campaigns while products organize themselves based on rules you define. Spend less time on manual work, more time growing.
Email Automation That Works While You Sleep
Build multi-step email campaigns that trigger automatically based on customer behavior. Send personalized coupon codes, nurture leads, and re-engage customers with customizable delays between messages. GDPR-compliant tracking ensures you stay on the right side of privacy laws.
Marketing Tools Built Right In
Integrated blog module for content marketing and SEO, Meta Pixel for conversion tracking, professional SMTP email sending, and advanced payment method restrictions. Everything you need to market and sell strategically, no third-party plugins required.
Social Login
Let customers sign in with Google, Apple and Facebook in one tap. Existing accounts are linked automatically, guest carts are merged, and 2FA still applies. Fewer forms means fewer abandoned carts.
Checkout That Converts
Modern minimal checkout layout, offcanvas navigation, and blazing-fast autocomplete search create a smooth shopping experience. Fast page loads mean happy customers and better conversion rates.
Professional Content Creation
Edit and optimize product images directly in the media library. Create beautiful product descriptions, CMS pages, and engaging slideshows with the modern TipTap editor - intuitive, powerful, and no external tools needed.
Accessibility Scanner Built In
Run WCAG audits straight from the admin with the built-in accessibility scanner. Every violation is outlined on a screenshot of your page, desktop and mobile, and mapped to the template that caused it. Scheduled scans and PDF export keep you compliant where accessibility is required by law.
Enterprise-Level Security
Protect your business with 2-factor authentication, passkey support for backend login, admin activity logging, GDPR-compliant captcha, and modern libsodium encryption. Sleep well knowing your store is secure.
Always Getting Better
Regular updates with real improvements like a brand-new storefront with eleven themes (26.9), social login (26.9), the accessibility scanner (26.9), a redesigned admin with dark mode (26.7), gift cards (26.1), and email automation (25.11). Maho evolves with your business needs.
For agencies
Deliver professional ecommerce solutions to clients with a platform that's proven, powerful, and cost-effective.
Client-Ready Platform
Clean, modern admin interface with professional features clients expect: media management, content editor, activity logs, and comprehensive reporting. Built-in blog and marketing tools mean you deliver more value out of the box.
Enterprise Features, Zero Licensing
Multi-store capabilities, advanced permissions, comprehensive APIs (REST, GraphQL, SOAP, MCP), and all the features enterprise clients demand. No per-client licensing fees, no SaaS subscriptions - pure profit margin.
Independent, Not Isolated
Maho stands on a battle-tested open-source foundation, hardened by real stores running in production. Active development, API documentation and developer guides, AI-powered code documentation via DeepWiki, and direct access to the maintainers mean you're never stuck.
For developers
Build with a modern tech stack and clean architecture, no legacy baggage, just great developer experience.
Modern Tech Stack
PHP 8.5+ built on industry-standard libraries: Doctrine DBAL 4.4 for database operations, Symfony HttpClient for HTTP requests, Symfony Validator for data validation, Symfony Messenger for background jobs, and Monolog for logging. A storefront and an admin on Tailwind CSS 4 and daisyUI 5, vanilla JavaScript only throughout. Contemporary, actively-maintained dependencies you can trust.
Clean Architecture
Well-designed MVC pattern, powerful ORM with collections, event-driven system, and modular architecture. Code that makes sense, patterns you recognize, structure you can extend confidently.
Comprehensive APIs
Brand-new REST & GraphQL API built on API Platform, with JWT authentication, granular per-resource permissions, and OpenAPI docs, plus the legacy SOAP and XML-RPC APIs for older integrations.
Multi-Database Support
Choose the database that fits your infrastructure. MySQL, MariaDB, PostgreSQL, and SQLite are all supported through Doctrine DBAL, with automatic SQL dialect handling. Your code works across all engines without modification.
Actively Developed
Regular releases with substantial improvements - not just patches. Recent additions: a Tailwind CSS 4 storefront, an MCP server, a native job queue, OpenTelemetry observability, a declarative database schema system, the API Platform-based REST & GraphQL API, and the Doctrine DBAL database layer. Continuous modernization with real features that matter.
Extensible by Design
Module system for clean extensions, setup resources for database migrations, event observers for behavior modification, layout XML for frontend customization. Build what you need without fighting the framework.
Self-hosting has its challenges.
We can help, with Maho Cloud.
Maho Cloud is managed hosting from the team that builds Maho. We run the servers, backups and updates, and your store stays yours.
It stays fully yours
- Your code. Open source Maho, with any module and any customization.
- Your data. Your customers, your orders, your catalog.
What we take care of
- The servers. Arm hardware in carefully chosen data centers.
- The stack. The most modern, optimized and customizable.
- Security updates. OS patches, applied for you.
- Backups. Daily, with offsite copies, verified every night.
- Monitoring. Uptime, TLS expiry, DNS and disk space, with alerts.
- Maintenance. Cron and reindexing, already scheduled.
- Growth. Move to a larger plan without a migration.
Every Maho Cloud store helps to fund Maho's development. It keeps Maho open, free and moving forward, for everyone and for you.
Ready to build the future of your ecommerce?
Whether you're launching your first store, delivering client projects, or building custom solutions, Maho gives you the foundation to succeed.