FlowRelay FlowRelay Docs Shopify Flow
All docs pages

START

USE CASES

SET UP

OPERATE

RECOVER

AGENT ACCESS

REFERENCE

Use Cases

Let an agent investigate an event

Use this path when a merchant wants an authorized agent to help answer what happened to an event without receiving broad store authority or private event data.

Open the practical guide Read Agent Access.

Investigation job #

An authorized agent can identify the endpoint, read the receipt, explain the current outcome, and suggest the next safe step from FlowRelay facts.

Recovery job #

When the grant allows it, the agent can prepare approved replay or diagnostics actions. Execution still follows preview, explicit confirmation, idempotency, and audit.

Hard boundaries #

Agents cannot self-escalate, approve billing, mint or widen their own grants, access raw secrets or payloads, submit support outside scoped FlowRelay support paths, or edit Shopify Flow without separate Shopify authorization.

Typical path

A typical path starts from the scenario, then moves into setup and verification.

  1. 01Use a private agent client the merchant trusts, such as Codex, Claude Code, the FlowRelay CLI run by a coding or ops agent, direct Agent Operations API calls, or MCP Agent Operations access where enabled.
  2. 02Create or inspect the merchant-authorized grant and confirm the agent has only the scopes needed for investigation.
  3. 03Give the agent the Agent Operations base URL and scoped token through private secret, environment, CLI, or MCP configuration rather than public docs, tickets, or shared prompts.
  4. 04Have the agent start from /llms.txt, the relevant Markdown page, and /agent/v1/manifest before making authenticated calls.
  5. 05Let the agent read setup state, event history, receipt facts, replay availability, and diagnostics state through the same Agent Operations contract.
  6. 06Require action previews for side-effecting work, including replay preview, confirmation, idempotency, metering, and audit.
  7. 07Escalate to a human for billing approval, grant changes, Shopify Flow workflow edits, secrets, raw event data, support requests, or anything outside the grant.