Set up Shopify integration
With the Shopify integration, your AI agent reads live data from your Shopify store. Customers asking "where is my order?", "is this still in stock?", or "is my return approved?" get an instant answer, in natural language, 24/7.
In short
Heyloha connects to your Shopify store via a custom app. You set it up yourself in 5 minutes from the Heyloha dashboard. Read-only, encrypted, no code needed.
What your agent can do
- Look up order status. The agent finds an order by number and replies with shipping and tracking details.
- Search products. The agent searches your catalog by keyword, brand, or type and returns up to 10 results with price and availability.
- Check inventory. The agent pulls live stock counts per variant. For low stock, it says "a few left" instead of an exact number.
- Report return status. The agent looks up returns tied to an order and reports the status in plain language.
All four are read-only. The agent cannot modify orders, cancel anything, or change inventory.
What you need
- A Heyloha account with at least one AI agent created.
- Admin access to your Shopify store, specifically the ability to create custom apps.
- About 5 minutes.
You don't need a developer, a Shopify Partner account, or any code. The custom-app flow works on every Shopify plan.
Connect Shopify
Open Shopify settings in Heyloha
In the Heyloha dashboard, click Settings in the left navigation. Under External systems, click Shopify. You'll see one card per website. Click "Connect Shopify" on the website you want to link.
Allow custom app development (new stores only)
Stores created from 2026 onwards ship with custom app development disabled by default. In Shopify admin, go to Settings → Apps and sales channels → Develop apps. If you see a button labeled "Allow custom app development", click it and confirm.
Create the custom app in Shopify
Go to Settings → Apps and sales channels → Develop apps and click "Create an app". Give the app a recognizable name, for example "Heyloha".
Configure the Admin API scopes
Click the Configuration tab, then click Configure next to Admin API integration. Tick exactly these four scopes: read_orders, read_products, read_inventory, and read_returns. Save.
Install the app and copy the token
Go to the API credentials tab and click "Install app" at the top. The Admin API access token appears (starts with shpat_ followed by 32 characters). Copy it immediately: Shopify shows the token only once.
Paste shop domain and token into Heyloha
In the Heyloha modal, paste your shop domain (always ends in .myshopify.com, even if you use a custom domain) and the Admin API token. Click Connect. The card flips to the Connected state showing your shop domain and connection date.
Did you miss copying the token? Shopify only shows it once. You'll need to uninstall and reinstall the app to get a new one.
Does it work?
To verify the connection works:
- Open the Heyloha chat widget on your website (or another channel).
- Ask a question like "Do you sell [known product]?". The agent should return product results with price and availability.
- Ask about the status of one of your own orders (e.g. "where is order #1001?"). The agent either answers or asks for the customer's email first, depending on your verification policy.
If the agent still says "I'll have someone follow up" after connecting, a scope is probably missing or the token is wrong. See Troubleshooting below.
Managing the connection
Pause
Toggle the Active switch off on the card. The agent immediately stops calling Shopify for this website. No more order lookups, no product searches. Flipping it back on is a single click, no reconnection needed.
Rotate the token
On the connected card, click the kebab menu and choose "Rotate token". Generate a new Admin API token in Shopify (same app, API credentials tab) and paste it in. The new token replaces the old one in Heyloha without interruption.
Do this if the old token was accidentally shared, if a teammate reinstalled the app, or if a security audit requires periodic rotation.
Disconnect
In the kebab menu, choose Disconnect. Heyloha asks for confirmation and lists what the agent will lose access to: order status, product search, inventory check, and return status. After confirming, the token is permanently deleted.
Multiple websites or stores
In Heyloha, each website is a separate AI agent environment with its own Shopify connection. In v1, a Shopify store can only be connected to one Heyloha website at a time. Running multi-region stores (NL, DE, BE)? Create a separate Heyloha website per region and connect each to its own Shopify.
Security
- The Admin API token is stored encrypted (AES-256). The key lives outside the database.
- The token never appears in API responses, logs, or error messages. On a 401, Heyloha logs "auth failed for integration X", not the token.
- The agent can only read: no changes to orders, inventory, or products.
- Isolated per website. An agent for store A literally cannot see store B's data. This is checked on every call.
Troubleshooting
"Allow custom app development" is missing in Shopify
Your Shopify role doesn't have "Develop apps" permission. The store owner (or another admin with full permissions) needs to enable it once, or grant the permission to your account.
"Shop domain must end in .myshopify.com"
You pasted a custom domain (e.g. www.acme.com) instead of the internal Shopify domain (acme.myshopify.com). Find the internal domain in Shopify admin → Settings → Domains under "Shopify-managed".
"This doesn't look like a valid Shopify token"
The token must start with shpat_ followed by 32 hexadecimal characters. Common mistakes: copying the API key or API secret instead of the Admin API token, copying surrounding whitespace, or using a Storefront API token.
Agent still says "I'll have someone follow up"
Possible causes: the connection is toggled off (check the card), a relevant scope is missing (see banner), or the token was revoked in Shopify. Reinstall the app, copy the new token, and use "Rotate token" in Heyloha.
Frequently asked questions
Does this work on every Shopify plan?
Yes. The custom-app flow is available on every Shopify plan including Basic, Advanced, Plus, and free trials.
Can the agent modify orders?
Not yet. All four capabilities are read-only. Write actions like cancelling or refunding are intentionally not shipped yet: they need stronger customer verification flows first.
Will customers see "Shopify" mentioned in chat?
No. The agent replies in natural language without naming the backing system. It says "your order shipped with DHL", not "according to Shopify, your order...".
Set up CRM and webhook integrationsSet up HubSpot integration