What can an AI agent do with
Add, change, and delete customers?
It can add, change, and delete customers in your store. It can also read them.
How to spot it
On a Shopify connection or settings screen, this is write_customers.
With it, an agent can
- Create customers with contact details and marketing consent
- Update customer details
- Delete customers who have never placed an order
- Read your full customer list
It cannot, on its own
- It cannot delete a customer who has placed an order
What a bad day looks like
It could change a customer's marketing consent or email by mistake, or delete customers who have not ordered yet.
Set it up safer
- Grant read_customers if it only needs to look people up
- Ask for an approval step before it deletes any customer
Narrower permissions on Shopify:
- Read your customer list
read_customers
Ask the company selling the agent
- Will it ever change a customer's marketing consent?
- Can it delete customers, and can I turn that off?
Source
Checked against Shopify documentation on 2026-09-28. All Shopify permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.