Connect Shopify to B6AI

Overview

The Shopify integration connects your store so bots can answer the questions customers ask most, “where’s my order?”, “is this in stock?”, “can I get a refund?”, using live data from Shopify.

It turns your storefront’s support into self-service, right inside the conversation.

What you can do with Shopify

Once connected, your bots and agents can use Shopify inside conversations and automations. Typical uses include:

1. Look up an order’s status by order number or customer email.
2. Show product details, price, variants and availability.
3. Check fulfillment and tracking information for a shipment.
4. Create draft orders, or start a return/refund (with the right permissions).
5. Surface a customer’s order history for context during a conversation.
6. One-click install the B6AI chat widget on your storefront.

How the integration works

You connect with just your store domain — B6AI uses its own Shopify app, so there is nothing to create in Shopify and no API token to copy.

Clicking Connect sends you to Shopify to approve the permissions B6AI needs; Shopify then returns a secure access token that B6AI stores encrypted at rest.

B6AI calls the Shopify Admin API on your behalf, limited to the permissions you approved.

Prerequisites

Make sure all of the following are in place before you start. Each one is required, skipping any will cause the connection to fail later.

1. A Shopify store where you can approve app permissions (staff or owner).
2. Your store’s myshopify.com domain (yourstore.myshopify.com).
3. The Enterprise Admin role in B6AI.

Generate your Shopify connection

B6AI authenticates with Shopify using your Shopify connection. Follow these steps exactly, each field you copy here is entered into B6AI later.

1. Unlike most integrations, Shopify needs no app, API key or token from you — B6AI provides the Shopify app.
2. The only thing you need is your store domain (yourstore.myshopify.com).
3. The secure connection is created during Connect (next section), where you approve B6AI’s permissions inside Shopify.

Required permissions & scopes

Grant only the scopes below. Each one maps to a specific B6AI capability; requesting fewer reduces risk and speeds up any review your Shopify administrator performs. The table explains exactly what each scope allows and why it is needed.

Connect Shopify in B6AI

Now enter your credentials in B6AI. Signed in as an Enterprise Admin, open Settings → Integrations, find the Shopify card and click Connect, then complete the form. Every field is explained below.

1. In B6AI, open Settings → Integrations and click Configure on the Shopify card.
2. Enter your store domain (yourstore.myshopify.com).
3. Click Connect — you’ll be redirected to Shopify.
4. Review and Approve the permissions B6AI requests.
5. You’re returned to B6AI and the store shows “Connected” — there is no token to copy.

{
  "provider": "shopify",
  "shop": "yourstore.myshopify.com",
  "status": "connected"
}

Verify the connection

Confirm the integration is live before you rely on it in a bot.

1. Confirm the Shopify card shows “Connected”.
2. Run the test: it reads your store name and a recent order (details masked).
3. Confirm the values match your Shopify admin.

Troubleshooting

If the connection fails or an action does not work, match the symptom below to its cause and fix.

Limitations & rate limits

Keep these constraints in mind so your bots behave predictably at scale.

1. Shopify rate-limits the Admin API (a leaky-bucket for REST; cost-based for GraphQL).
2. Refunds and returns require the appropriate permissions and store settings.
3. Some data and features require Shopify Plus.

Security best practices

1. Grant only the scopes and permissions listed above, never request more “just in case”.
2. Rotate your Shopify connection on a regular schedule, and immediately if you suspect exposure.
3. Restrict the Enterprise Admin role (which manages integrations) to a small, trusted group.
4. Prefer a dedicated service account or bot user over a personal login, so access survives staff changes.
5. Review the integration’s activity in the B6AI Activity Logs periodically for unexpected calls.
6. Disconnect the integration the moment a credential leaks; then rotate it in Shopify before reconnecting.

Recommendations

1. Test against a sandbox or non-production Shopify account before connecting live data.
2. Document which bots and flows depend on this integration so changes are predictable.
3. Set a recurring reminder to review scopes and rotate credentials.
4. Enable only the capabilities you actually use today; you can widen scopes later.