FlowRelay
Agent Access
Agent Access
Built from the ground up for agent operations, FlowRelay gives authorized agents receipts, scoped grants, action previews, redaction, and audit instead of raw event bodies and guesswork.
What counts as an agent #
An agent is a merchant-authorized software operator using a trusted private client or automation environment. Today that usually means Codex, Claude Code, the FlowRelay CLI run by a coding or ops agent, direct Agent Operations API calls from customer-controlled automation, or MCP Agent Operations access where enabled. FlowRelay is not hosting a separate chatbot for the merchant.
Practical handoff #
The normal handoff is the Agent Operations base URL plus a scoped grant token from the Agent Access screen. Give those values to the agent only through private secret, environment variable, CLI, or MCP host configuration. Do not put tokens in public examples, shared prompts, docs, tickets, screenshots, or repo files.
What Agent Access is for #
Agent Access lets a merchant authorize a trusted agent to inspect setup, receipts, recovery options, diagnostics, and approved action previews through scoped FlowRelay operations.
Usage limits still apply #
Agent Access is included with published monthly protective limits. Authority tiers decide what an agent may do; the plan's Agent Operations limits decide how much automated read, preview, and execution work can run in the period.
What stays human-controlled #
Billing approval, grant changes, Shopify Flow workflow edits, support submission, raw event data access, and authority expansion stay under human control unless separately authorized. Agents may receive one-time endpoint setup secrets only when the scoped operation explicitly returns them, such as endpoint creation or secret rotation.
Agent jobs #
Choose authority based on the job, not the agent's convenience.
| Job | Typical access |
|---|---|
| Explain what happened to an event | Read setup, event history, receipts, and safe diagnostics context. |
| Prepare recovery | Preview replay or diagnostics actions without executing outside the grant. |
| Execute a recovery action | Execute only the approved action with idempotency and audit. |
Operating rules
Use these controls to keep agent access scoped and reversible.
- 01Open Agent Access from FlowRelay inside the merchant-authorized Shopify app context.
- 02Review the plan's published Agent Operations limits before authorizing high-volume agent work.
- 03Treat an agent as a merchant-authorized software operator in a trusted private client, not a FlowRelay-hosted bot or a separate Shopify user.
- 04Choose the lowest useful authority tier and scope for the work the agent is allowed to perform.
- 05Set an expiry that matches the task, then create or review the grant from the human admin surface.
- 06Give the agent https://api.flowrelay.app plus the scoped grant token through private secret, environment, CLI, or MCP configuration.
- 07Have the agent start from the docs index, Markdown pages, /agent/v1/manifest, and the FlowRelay Operator Skill before using API, CLI, or MCP Agent Operations access.
- 08Use mission playbooks and availability guidance so the agent can map the operator's goal to safe context gathering, allowed actions, and refusal handling.
- 09Keep billing approval, grant changes, Shopify Flow edits, secrets, raw event data, and support requests under explicit human control unless separately authorized.