Product and API use
Shopify API and StoreAdOps
StoreAdOps is a hosted SaaS product and secure tool service that reads a merchant's Shopify catalog, inventory, and order economics through the Shopify Admin API to inform paid-media decisions. The Shopify integration is read-only.
Business model
StoreAdOps is currently offered as a free private-alpha SaaS product. Paid subscription plans and external billing are not active. StoreAdOps does not sell products, purchase media, or operate as an agency. Merchants remain responsible for their own Shopify store and their own advertising accounts.
Shopify access requested
When a merchant installs StoreAdOps, it requests the following read-only scopes through Shopify's OAuth consent screen:
read_products— product catalog, variants, images, pricing, and tags used to assess ad readiness.read_orders— recent order economics (totals, financial and fulfillment status, line items) without customer personal data.read_inventory— stock levels and unit cost to assess stock risk before promoting a product.
No write scopes are requested. StoreAdOps cannot modify your store, create or edit products or orders, or change inventory, and it uses the Shopify GraphQL Admin API only.
How a merchant connects Shopify
- The merchant installs StoreAdOps from the Shopify App Store or Shopify Admin.
- Shopify hands off to StoreAdOps with a signed shop identity; the merchant never types their store domain.
- The merchant signs in to StoreAdOps and approves the read-only Shopify OAuth consent screen.
- StoreAdOps stores an encrypted access token scoped to that single store.
- The signed-in merchant creates a revocable, tenant-scoped API key for an MCP-compatible AI client, which can then read only that store.
Shopify use cases
Read workflows include store context, product listing and search, product detail and image metadata, inventory and stock-risk checks, collections, recent-order economics summaries, product-margin estimates, product ad-readiness analysis, and product recommendations for paid media.
There are no management or write workflows for Shopify; the integration cannot change your store.
Safety and authorization controls
- The Shopify surface is read-only; no write tools exist for Shopify.
- Each request is scoped to the single store the merchant connected; cross-store access is rejected.
- API keys are revocable and tenant-scoped.
- Installation uses Shopify's signed shop handoff, and Shopify OAuth callbacks and privacy webhooks are rejected unless the Shopify HMAC signature verifies.
Data handling
Shopify store data is retrieved live during tool execution and is not persisted as a catalog or order-data warehouse. StoreAdOps stores an encrypted Shopify OAuth token, connection metadata (including the basic installing-user account details Shopify returns), hashed API keys, OAuth state, idempotency records, and write audit records. StoreAdOps does not store your customers' personal data, and order data is read without customer PII.
Your Shopify data is not sold and is not used to train general AI models. You can revoke access at any time by uninstalling StoreAdOps from your Shopify admin, and request deletion through support@storeadops.ai.
Privacy compliance webhooks
StoreAdOps implements all three Shopify-mandatory privacy webhooks at a single HMAC-verified endpoint:
customers/data_request— acknowledged; StoreAdOps stores no customer personal data.customers/redact— acknowledged; StoreAdOps stores no customer personal data.shop/redact— deletes the stored StoreAdOps connection records for that shop.
Shopify tools (13 tools)
StoreAdOps exposes the following read-only Shopify tools to connected AI clients: All 13 are read-only tools that never change your account or store.
Ad readiness & product recommendations3
- read
analyze_shopify_product_ad_readinessAssess catalog, inventory, and creative readiness. - read
get_shopify_product_marginsEstimate product margins from price/cost. - read
recommend_shopify_products_for_adsRank products for paid media.
Products & collections5
- read
get_shopify_collectionsList Shopify collections. - read
get_shopify_productGet a Shopify product by product id. - read
get_shopify_product_imagesGet product image metadata. - read
list_shopify_productsList Shopify products with ad-relevant fields. - read
search_shopify_productsSearch Shopify products by text query.
Inventory & stock1
- read
get_shopify_inventoryGet inventory levels and stock risk.
Orders & revenue2
- read
get_shopify_orders_summarySummarize recent order economics. - read
list_shopify_recent_ordersList recent Shopify orders without customer PII.
Store context & connection2
- read
get_shopify_connection_statusView Shopify connection health and granted scopes. - read
get_shopify_store_contextSummarize Shopify shop, product, and order context.
Frequently asked questions
What can StoreAdOps do with my Shopify store?
After you install and authorize the app, connected AI clients can read your product catalog, inventory, and order economics to inform ad decisions. It cannot change your store.
Do you store my customers' data?
No. Order data is read without customer PII, and store data is fetched live during tool execution rather than warehoused.
Is this an embedded Shopify app?
No. StoreAdOps is a non-embedded, first-party app; installation begins from Shopify and continues in your StoreAdOps session after OAuth.
How do I disconnect or delete my data?
Uninstall StoreAdOps from your Shopify admin; the shop/redact webhook deletes your stored connection. You can also request deletion through support@storeadops.ai.