Shopify refund and discount guardrails for AI agents.
Enter your store’s myshopify.com domain and approve the Audon app in your Shopify admin. Audon uses the Admin GraphQL API and only reads until you turn on protection. Then refunds, order cancels, discount codes and store credit your agents propose are checked before they run and looked up in Shopify afterwards.
Actions it runs. Each checked by built-in rules before your own policies.
Create a refund
refund.create
- Payment (or Shopify order) exists, is paid and is in the action currency
- Amount ≤ captured (received) amount − already refunded − refunds in flight
- Payment is not disputed
- No refund of the same amount on the same payment or order in the duplicate window
Issue a customer credit
credit.create
- Customer exists and is not deleted
- Customer balance currency matches
- No credit of the same amount to the same customer in the duplicate window
Grant a discount
discount.create
- A percent discount states the value at risk as amount
- No discount of the same amount for the same customer in the duplicate window
Cancel an order
order.cancel
- Order exists and is not already cancelled (Shopify)
- A cancel with refund is refused on a disputed payment
- No cancel of the same order in flight or completed
Permissions. One install; write access used only after you turn on protection.
- Read scopes
- read_orders, read_discounts, read_gift_cards, read_customers, read_store_credit_accounts, read_store_credit_account_transactions
- Write scopes
- write_orders, write_discounts, write_gift_cards, write_store_credit_account_transactions
Good to know.
- Audon reads ids, amounts, currencies, statuses, dates and its own notes. It never requests customer names, emails, phone numbers or addresses.
- Shopify shows orders from the last 60 days unless the app also holds read_all_orders.
- Uninstalling the app disconnects the store.
Questions about Shopify.
Which actions can AI agents run in Shopify through Audon?
Create a refund, issue a customer credit, grant a discount and cancel an order. Each is checked against built-in business rules and your own policies before it runs.
Can Audon change anything in Shopify as soon as I connect?
No. A new connection starts read-only, for the free action audit, and Audon never sends a write with a read-only connector. A signed-in person turns on protection later; there is no second install.
What happens when the outcome is unclear?
The action is Unknown and is never retried blindly. Audon looks it up at the provider first, starting after 30 seconds and backing off, and only allows a retry once the outcome is known.
What else do I have to change?
Remove the agent’s direct access to the same API (for example a Stripe secret key in its environment), or it can bypass the checks.
Last updated