Reliable external events into native automation.
FlowRelay is the governed handoff layer for outside events: authenticate the sender, keep receipt facts, and hand the trigger to the native automation your team already uses. FlowRelay for Shopify Flow is the first live edition.
External event sources
-
Webhooks
POST /events
200 OK -
ERP systems
inventory.updated
200 OK -
CRM platforms
deal.stage.changed
200 OK
FlowRelay
- Authenticate
- Receipt facts
- Replay context
- Diagnostics
- Governed handoff
Native editions
- Shopify FlowLive
- Future editionNot live
- Partner workflowNot live
- Additional platformNot live
Event received
Proof recorded
Verified
Handoff recorded
APIProgrammatic control
CLITerminal operations
MCPAgent Operations access
Receipt facts
Know what happened before recovery begins.
FlowRelay keeps one receipt for what arrived, how it was authenticated, what was validated, and what was handed to Shopify Flow.
- AuthenticationVerify the sender before the event enters native automation.
- Receipt factsRecord arrival, authentication, validation, and handoff in one place.
- Replay contextShow whether retry is available and what to review first.
- DiagnosticsShare redacted support details with secrets and event data removed.
Receipt facts
fr_rcpt_7k482490
Delivered to Shopify Flow
FlowRelay proves the handoff.
Shopify Flow owns the downstream workflow after it receives the trigger.
Event received
- Endpoint
- Post-purchase sync
- Source
- Order service
- Event
- Payment succeeded
- Received
- Apr 29, 2026 14:22 UTC
Chain of custody
- Received14:22 UTC
- AuthenticatedSender verified
- ValidatedFields ready
- Handed offShopify Flow received
Replay
Eligible
Review side effects before retry.
Diagnostics
Ready
Package is redacted by default.
Secrets
Hidden
Secrets and raw event data stay out of proof.
Handoff result
- Status
- Delivered
- FlowRelay proof
- Trigger handed to Shopify Flow
- Downstream workflow
- Owned by Shopify Flow
Access grant
grant_fr_4d90
Active, 29 days left
Humans and authorized agents use the same controlled operations.
No raw event bodies, secrets, authentication headers, or silent replay actions.
Operator
Human or authorized agent
Access via
API, CLI, MCP
Allowed
Read receipt facts, prepare retry, share diagnostics
Restricted
Raw payloads, secrets, silent replay
Read receipt facts
Allowed
Proof-safe details only
Prepare retry
Review required
Side effects shown first
Share diagnostics
Redacted preview
Redacted package
Governed access
Built from the ground up for agent operations.
Receipts, scoped grants, action previews, redaction, and audit instead of raw event bodies and guesswork.
UIHuman review and recovery.
APIControlled programmatic access.
CLITerminal access for deliberate recovery work.
MCPAgent Operations access when enabled.
- ScopeLimited grants and explicit approvals for sensitive actions.
- AuditEvery sensitive operation leaves a durable trail.
- RedactionSecrets, authentication headers, and customer data stay out of public proof.