You stay in control.

Installing a plugin grants no shop access. You must sign in as the shop owner and approve specific permissions. Publishing and changes to live products require a separate review in your shop.

The connection uses OAuth authorization codes with PKCE, exact callback validation, short-lived access tokens and rotating refresh tokens. Your shop checks permissions and revocation for every request. Add a passkey in Studio for stronger identity verification.

Only enrolled HTTPS shop origins can be reached. Connections to private networks, redirects to other servers and arbitrary proxy destinations are rejected. This service never has a shared shop administrator key.