What can an AI agent do with
Read your full order history?
This removes the 60 day limit. With it, the agent can see every order your store has, not just recent ones.
How to spot it
On a Shopify connection or settings screen, this is read_all_orders.
With it, an agent can
- See all orders in your store, including ones older than 60 days
It cannot, on its own
- It does nothing alone; it works together with read_orders or write_orders
- An app cannot ask for it until Shopify approves the app for it
What a bad day looks like
A leak or misuse would expose years of customer purchase history instead of two months.
Set it up safer
- Use read_orders alone if the agent only works with recent orders
Narrower permissions on Shopify:
- Read recent orders
read_orders
Ask the company selling the agent
- Why do you need orders older than 60 days?
- Has Shopify approved your app for this permission?
Source
Checked against Shopify documentation on 2026-09-28. All Shopify permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.