Shopify — connect with OAuth
Connect a Shopify store to PullPush without pasting Admin API keys. The public Shopify app uses OAuth install: authorize once, PullPush creates an encrypted SOURCE connection and registers order webhooks.
Before you start
- A PullPush account at app.pullpush.ai
- A tenant API key (
pp_…) from Settings → API Keys (used as?token=on install) - Your shop domain:
your-store.myshopify.com
App Store listing is separate — dashboard-initiated OAuth works today when the Shopify app credentials are configured on the platform.
Install from the dashboard
- In PullPush open Connections → Add Connection → Shopify (or use the install URL below).
- Enter the shop domain and continue. PullPush redirects to Shopify’s authorize screen.
- Approve scopes, then return to PullPush. A SOURCE
shopifyconnection is created with envelope-encrypted credentials. - Order webhooks (
orders/create,orders/updated) are registered automatically.
Install URL (manual)
https://api.pullpush.ai/api/shopify/install?shop=YOUR-STORE.myshopify.com&token=pp_YOUR_TENANT_KEY
Replace the shop and token. Shopify-initiated installs verify HMAC; dashboard installs use the tenant token so the connection lands on the right workspace.
What syncs
Configured through PullPush flows (not inside Shopify Admin):
- Orders — webhook + poll; outbound to fulfilment / accounting / 3PL
- Stock / products — via inventory and product scopes as mapped in flows
Never writes 0 for “unknown” stock — missing data is skipped.
See Connections and Sync types.
Scopes
Least privilege used by the app:
| Scope | Why |
|---|---|
read_orders |
Sync orders to destinations |
read_products / write_products |
Catalog + stock updates |
read_inventory / write_inventory |
Inventory levels across channels |
GDPR / compliance
Shopify mandatory webhooks hit POST https://api.pullpush.ai/api/shopify/gdpr
(customers/data_request, customers/redact, shop/redact), HMAC-verified.
Safety path
- Create the connection via OAuth
- Wire a flow in shadow mode
- Run preview before live writes
Troubleshooting
| Symptom | Fix |
|---|---|
shopify_app_not_configured |
Platform Shopify app client id/secret not set yet — contact support |
| Invalid shop | Domain must be exactly *.myshopify.com |
| Connection missing after authorize | Confirm the token= tenant key is valid and the tenant is active |
| Webhooks not firing | Check connection status; re-install or open Support with the shop domain |
Related
- REST API — Shopify (
/api/shopify/install, callback, GDPR) - WordPress / WooCommerce — one-click storefront twin
- Usage guide
- Privacy