Which OAuth scopes does the FloGPT Shopify app request?

Read-only scopes for orders, all orders, analytics, checkouts, customers, discounts, fulfillments, inventory, product feeds, products, purchase options, returns, shipping, content, pixels, and customer draft orders and orders. FloGPT never requests write scopes for your storefront — refund or cancel actions taken by the AI go through your store policies and route to a human ticket when needed.

How do I enable the FloGPT chat widget on my storefront?

FloGPT installs as a theme app embed. From the embedded FloGPT admin, click "Open theme editor" — it deep-links straight to the App embeds tab — toggle FloGPT Chat Widget on and click Save. The widget then appears on every storefront page; no theme code changes are required. Headless storefronts can paste the manual installation snippet shown on the same page.

Which Shopify webhooks does FloGPT subscribe to?

FloGPT subscribes to app/uninstalled, app/scopes_update, orders/create, orders/cancelled, orders/fulfilled, orders/updated, customers/create, customers/update, customers/delete, plus the GDPR compliance topics customers/data_request, customers/redact, and shop/redact. The API version is pinned to 2026-01 in shopify.app.toml and every webhook is HMAC-verified before processing.

How does FloGPT handle GDPR data requests and customer redaction?

FloGPT processes the customers/data_request, customers/redact, and shop/redact webhooks per Shopify's mandatory compliance contract. Customer chat and call transcripts are scrubbed of redacted customer references within the documented retention window, and the shop record itself is purged on shop/redact. PII redaction on transcripts is also available as an opt-in setting.

What outbound triggers can FloGPT fire from Shopify events?

FloGPT ships templates for cart-abandoned recovery calls, checkout-abandoned recovery, high-value order placed confirmations, fulfillment-created proactive updates, refund-initiated confirmations, and time-relative post-delivery CSAT calls. Each trigger has filters for minimum order value, tags, and product IDs, plus per-region quiet hours and a deduplication window so the same customer isn't called twice in 24 hours.

What can the AI do with my Shopify store during a call or chat?

Through the in-call Shopify tool, the AI can look up an order, customer, product, or fulfillment; search products with attribute filters; summarize line items and tracking; and SMS a tracking link or recovery code while still on the call. Refund and cancel requests are handled safely — the AI never promises a refund and instead opens a high-priority human ticket with full context attached.

The Open Dashboard button isn't working — what should I check?

Reload the embedded FloGPT admin first; the SSO code has a 60-second TTL and is minted fresh on every load. If a Backend connection or Storefront widget banner appears, your deploy environment's INTERNAL_API_SECRET likely doesn't match the FloGPT backend's. Fix the secret on both sides and reload — the embedded admin re-syncs your merchant record and the Open Dashboard button reappears.

Docs · Shopify Integration · App Version 2026-01

FloGPT for Shopify — Integration Guide

Everything you need to install, configure, and operate the FloGPT Shopify app. Storefront chat widget, AI voice agent, in-call Shopify tools, outbound triggers, webhooks and GDPR — all in one place.

Start with installation Product overview

· Read-only Shopify scopes· HMAC-verified webhooks· GDPR / DPDP compliant

Step 1

Install the FloGPT Shopify app

FloGPT is distributed as an embedded Shopify app. Open the FloGPT listing on the Shopify App Store, click Add app, and approve the requested OAuth scopes. Shopify redirects you straight into the embedded FloGPT admin.

Open the Shopify App Store and search for FloGPT.
Click Add app. Shopify prompts you for the OAuth scope grant.
On first install, FloGPT auto-creates a Shopify-scoped account for your store using <shop>@shopify-merchant.flogpt.com. You don't need to register separately.
The app provisions a unique widget ID and registers webhooks declaratively from shopify.app.toml.

Step 2

OAuth scopes requested by FloGPT

FloGPT requests read-only scopes for the data the AI agent needs to answer support questions and recommend products. Refund and cancel actions never happen silently — they route to a human ticket with the call or chat transcript attached.

Scope	What FloGPT does with it
`read_orders`	Order lookup, status, line items
`read_all_orders`	Historical orders beyond the default 60-day window
`read_analytics`	Storefront analytics and conversion signals
`read_checkouts`	Abandoned-checkout recovery triggers
`read_customers`	Customer 360 — past orders, contact details
`read_discounts`	Quote active discount codes during a call/chat
`read_fulfillments`	Live shipment status and tracking URLs
`read_inventory`	Filter recommendations by in-stock items
`read_product_feeds`	Surface seasonal / curated product feeds
`read_products`	Product search, attributes, variants, pricing
`read_purchase_options`	Subscriptions, pre-orders, deferred payment
`read_returns`	Return eligibility and existing return cases
`read_shipping`	Shipping zones, rates and estimated delivery
`read_content`	Pages and blog content for knowledge grounding
`read_legal_policies`	Refund/return, shipping, privacy & terms policies
`read_pixels`	Storefront tracking pixel events
`customer_read_draft_orders`	Draft order context for assisted-sales
`customer_read_orders`	Customer-scoped order access for chat lookups

Step 3

Enable the storefront chat widget

The chat widget installs as a theme app embed. No theme code changes are required and you can toggle the widget on or off without touching Liquid.

From the embedded FloGPT admin, click Open theme editor. The link deep-links straight to your live theme's App embeds drawer with the FloGPT embed pre-selected.
Toggle FloGPT Chat Widget to on.
Click Save. Visit your storefront — the chat bubble should appear in the configured corner within seconds.

The embed automatically detects your shop domain and the widget loads its configuration from FloGPT — no widget ID needs to be hardcoded into the theme.

Step 4

Open the full FloGPT dashboard

The embedded admin covers widget toggles and customization. For everything else — knowledge base, voice agents, call pipelines, workflows, analytics — click Open Dashboard.

The button mints a fresh single-use SSO code on every page load with a 60-second TTL.
It redirects to /auth/shopify-sso?code=… on the FloGPT frontend, which exchanges the code for a session.
If the SSO code can't be minted, the button is replaced with a clear diagnostic banner — you'll never end up on a generic login screen.

Step 5

Customize the widget

Inside Shopify

Quick settings

· Theme (light, dark, auto)
· Launcher position
· Widget title
· Welcome message and greeting
· Input placeholder text
· Active / inactive toggle

In the full dashboard

Advanced customization

· Brand colors and gradients
· Custom CSS and fonts
· AI system prompts
· Knowledge-base sources
· Workflows and triggers
· Analytics and transcripts

Reference

AI tools in voice & chat

During a call or chat, the FloGPT agent can call live Shopify tools mid-conversation. Tools are surfaced based on the scopes you've granted — the LLM only sees actions it has permission to run.

get_order

Pull an order by name, ID or customer email — line items, totals, tracking, status.

list_orders

List recent orders for the authenticated customer, with attribute filters.

get_customer

Fetch a customer profile, contact details, and order history summary.

search_products

Search the live catalog with filters (price, size, color, stock, tags).

get_fulfillment

Resolve shipment status and a carrier tracking URL for a given order.

get_discount

Quote active discount codes and their eligibility rules.

send_sms_followup

Send a tracking link, recovery code or confirmation while the call is live.

open_support_ticket

Escalate a refund or sensitive request to a human with full conversation context.

Reference

Outbound trigger templates

Outbound calls fire from Shopify webhooks and time-relative cadences. Each trigger ships with a Shopify webhook subscription, a dedupe key, a phone resolver and a default call script — drop it into a pipeline and the agent starts dialing.

Cart Abandoned

carts/update

Recovery SMS + outbound call once cart value crosses your minimum.

Checkout Abandoned

checkouts/create

Recover the sale while it's still warm — agent dials with cart context.

High-Value Order

orders/create

Confirmation call on high-AOV orders to verify intent and reduce chargebacks.

Shipment Created

fulfillments/create

Proactive "your order is on the way" call with live tracking link.

Refund Initiated

refunds/create

Confirmation call when a refund is created — sets clear expectations.

Post-Delivery CSAT

time-relative

Automated CSAT call N days after fulfillment — capture feedback and reviews.

Reference

Webhooks & data flow

Webhook subscriptions are declared in shopify.app.toml (the App Store source of truth) and reconciled on every page load of the embedded admin. The API version is pinned to 2026-01.

Topic	Purpose
`app/uninstalled`	Uninstall cleanup — marks the merchant inactive in FloGPT
`app/scopes_update`	Re-syncs scopes after a permissions change
`orders/create`	Powers high-value order confirmation calls
`orders/updated`	Keeps order state in sync for in-call lookups
`orders/cancelled`	Suppresses follow-up triggers and updates state
`orders/fulfilled`	Powers proactive shipment-update calls
`customers/create`	Onboarding flows and welcome SMS triggers
`customers/update`	Customer 360 stays current for support agents
`customers/delete`	Removes the customer reference from FloGPT
`customers/data_request`	GDPR — packages customer data on request
`customers/redact`	GDPR — purges customer references after the retention window
`shop/redact`	GDPR — purges the entire shop record after uninstall

Compliance

Privacy, GDPR & data retention

FloGPT implements Shopify's mandatory compliance webhooks plus additional opt-in privacy controls for chat and call transcripts.

customers/data_request

A merchant request is logged and any customer data FloGPT has stored is packaged for delivery within the documented response window.

customers/redact

Customer chat transcripts, call transcripts and stored profile fields are purged after the documented retention window so no PII remains tied to that customer.

shop/redact

48 hours after a shop uninstalls FloGPT, the entire shop record (merchant profile, encrypted creds, derived caches) is purged.

Operations

Troubleshooting

The embedded admin runs four health probes on every load — backend sync, SSO code minting, public widget lookup, and widget asset CDN — and surfaces a diagnostic banner the moment one of them fails. The most common issues and their fixes:

Backend connection problem

Symptom: The embedded admin shows "FloGPT can't reach the backend".
Cause: INTERNAL_API_SECRET in the Shopify-app deploy env doesn't match the FloGPT backend's env, or the backend isn't reachable from the app.
Fix: Set INTERNAL_API_SECRET to the same value on both sides, redeploy, then reload the embedded admin — the merchant row re-syncs automatically.

Storefront lookup not found

Symptom: Banner: "Widget can't be resolved from your shop domain." The theme embed loads but no chat bubble appears.
Cause: The merchant row exists but the public /api/widget/shopify/by-domain endpoint returns 404 — usually a stale install on a renamed shop domain.
Fix: Open the embedded admin once to trigger a re-sync, or click "Re-validate" in the FloGPT integrations panel. If the shop's primary domain changed, the embed picks it up on the next load.

Widget script bundles missing

Symptom: Banner: "Widget JavaScript can't be loaded from your frontend."
Cause: The FloGPT frontend was deployed without a production build, so the widget bundles aren't present at the expected /widget/ URL.
Fix: Redeploy the FloGPT frontend with `npm run build` and confirm `/widget/flogpt-widget.js` and `/widget/flogpt-widget-ui.js` both return 200.

Open Dashboard goes to /login

Symptom: Clicking "Open Dashboard" dumps you on a generic login screen instead of signing you in.
Cause: The SSO single-use code couldn't be minted, almost always cascading from a backend sync failure above.
Fix: Fix the backend connection first, reload the embedded admin, then click Open Dashboard again — the code is minted fresh on every load with a 60-second TTL.

Webhook says 401

Symptom: Shopify's webhook console reports 401 Unauthorized for the FloGPT endpoint.
Cause: HMAC signature mismatch — the app's API secret was rotated, the raw request body was modified by a proxy, or the wrong webhook URL is registered.
Fix: Re-register webhooks from the embedded admin (it auto-reconciles on every load), and confirm no upstream proxy is gzipping or re-serializing the JSON body.

Shopify · Docs FAQ

Frequently asked questions

Install FloGPT from the Shopify App Store, approve the requested OAuth scopes, and Shopify redirects you into the embedded FloGPT admin. The app provisions a widget ID and a FloGPT account for your store automatically — no extra signup is needed. You can manage the chat widget and open the full dashboard from inside Shopify.

Ready to plug FloGPT into your Shopify store?

Install the app, enable the theme embed, and let the AI agent handle order lookups, refunds, returns and recovery calls 24/7 — across phone and chat.

Book a Free Demo See product overview

FloGPT for Shopify — Integration Guide

Install the FloGPT Shopify app

OAuth scopes requested by FloGPT

Enable the storefront chat widget

Open the full FloGPT dashboard

Customize the widget

Quick settings

Advanced customization

AI tools in voice & chat

Outbound trigger templates

Cart Abandoned

Checkout Abandoned

High-Value Order

Shipment Created

Refund Initiated

Post-Delivery CSAT

Webhooks & data flow

Privacy, GDPR & data retention

Troubleshooting

Backend connection problem

Storefront lookup not found

Widget script bundles missing

Open Dashboard goes to /login

Webhook says 401

Frequently asked questions

How do I install the FloGPT app on my Shopify store?

Which OAuth scopes does the FloGPT Shopify app request?

How do I enable the FloGPT chat widget on my storefront?

Which Shopify webhooks does FloGPT subscribe to?

How does FloGPT handle GDPR data requests and customer redaction?

What outbound triggers can FloGPT fire from Shopify events?

What can the AI do with my Shopify store during a call or chat?

The Open Dashboard button isn't working — what should I check?

Ready to plug FloGPT into your Shopify store?