Shopify

Connecting a store

Authentication uses a Shopify Custom App's Admin API access token (Settings → Apps and sales channels → Develop apps in Shopify admin) — Shopify OAuth apps are not supported.

The shop must be a `*.myshopify.com` domain; custom storefront domains are not accepted when creating a connection.

New connections start pending and must pass a verification check (a valid access token and a reachable Admin API) before they can publish.

What publishing does

Publishing attaches the image's active derivative (or the original, if no derivative is selected) to a Shopify product you search for and select from your own store — it never creates a new product, variant, order, or inventory record.

The image's alt text is set from your approved metadata, and every publish is verified by re-reading the product image back from Shopify after upload.

Uploads are never repeated once a remote image ID exists — retries resume from the metadata/verification step, they do not re-upload the file.

What publishing does not do

Img Pilot never creates, edits, or deletes Shopify products, variants, orders, or inventory — only the product image it uploaded itself is touched.

Nothing is ever deleted remotely on your Shopify store by this integration; disconnecting a connection or deleting the SaaS project only stops future publishing and destroys the locally stored access token.

The Admin API access token is encrypted at rest and is never returned by any API response or shown again in the dashboard after it is saved.

Limits and retries

Connection counts, monthly publish volume, and bulk publish batch size are limited by plan.

Failures such as authentication or permission errors are not retried automatically; transient network or availability errors are retried with a bounded attempt count before a job is marked failed.