Grok Bot + Shopify

How a Bot connects

Custom app Admin API token from a Bot staff account, scoped per routine. Browser login is blocked by Cloudflare; see the Shopify fix.

The Bot's identity

Shopify staff account for the Bot with minimal permissions; a custom app under that account for tokens. Don't reuse a human's login. If you did, see shared computer cleanup.

Routines we've run

• Daily — orders with fulfilment issues (address problems, backorders): list, draft customer emails for approval
• Daily — low-stock report against reorder points; draft supplier POs for approval
• Weekly — review responses: draft replies to new reviews in brand voice, queue for approval
• Weekly — supplier follow-ups on open POs: chase ETAs by email from the ops-bot address

Each routine follows the four-part shape: when it runs, what it reads (bounded), what it produces, when it stops. See routines best practices.

The thing to gate

Anything customer-facing without approval, and discounts/refunds. Read orders unattended, write with a tap.

Verdict

High value once you stop using the browser. The supplier-chasing and low-stock routines are the ones store owners keep.

Setup notes

• Test every routine supervised until it's produced the right output three times.
• Add the routine's completion line to your heartbeat log so silent failures show up.
• Put the Shopify token in the Bot's connector settings or knowledge file, never in a chat message.