Commerce
AI agents that use Shopify
UtilitySpaces gives an AI agent scoped access to Shopify through its own encrypted connection, not your password. The agent can call 5 named Shopify tools, and the one that writes waits for a person's approval unless an admin has set the connection to run without asking. Every call is written to a hash-chained audit log with its arguments and its result.
What an agent can do in Shopify
Read products, orders, and customers on a Shopify store, and update products. An agent calls these by name, and matching is exact.
| Tool | What it does | Waits for approval by default |
|---|---|---|
| List products | List store products. | No — read only |
| Get product | Get a single product by id. | No — read only |
| List orders | List store orders. | No — read only |
| List customers | List store customers. | No — read only |
| Update product | Update a product's fields (title, status, tags, ...). | Yes — it writes |
4 read tools, 1 write tool. Generated from the connector catalogue the product runs on, so it cannot list a tool that does not exist.
What teams hand an agent in Shopify
Store teams hand an agent the catalogue and order questions: pulling a product with Get product, listing recent orders, and summarising what sold. Update product is the only write, it can change a product's title, status, or tags, and it waits for a person to approve it unless an admin has set this connection to run without asking.
- Answer "what did we sell yesterday" in the inbox by listing orders for the day and summarising them by product.
- Audit product listings on a schedule by listing products and flagging missing descriptions, tags, or odd titles.
- Update a product's tags or title when a seasonal campaign starts or a supplier renames a line (after a person approves it)
What waits for a person
Reads run on their own. These do not — each one waits in Approvals for an owner or admin unless an admin has set this connection to run writes without asking, and every call toShopify, approved, rejected or unattended, is logged.
- Update product PUT
What connecting Shopify takes
Shopify uses an API key you create in Shopify and paste in once. A workspace admin sets the connection up; the fields are:
- Store URL
- Admin API access token
Credentials are encrypted and bound to your workspace, never read back, and every outbound call passes one guarded fetch — the connector security posture sets out exactly how, and the security page covers the platform around it.
Where Shopify fits
Give an agent Shopify work by writing a message in the inbox, or put its tools in a scheduled flow. What the run cost is on the cost breakdown.
Other commerce integrations: Stripe, WooCommerce. Or see every application agents can connect to.
See it doing your actual work
Open a demo workspace, connect one app, and give an agent a real job. No card, no sales call.
We reply to every message within one business day.