What can an AI agent do with
Create draft orders and turn them into real orders?
It can create draft orders and turn them into real orders. When it completes a draft, it can mark the order as paid, and the customer can be notified.
How to spot it
On a Shopify connection or settings screen, this is write_draft_orders.
With it, an agent can
- Create draft orders with customer, items, addresses, and payment terms
- Turn a draft into a real order in your orders list
- Mark the new order as paid, or set it as payment pending
- Reserve stock for the items on that order
It cannot, on its own
- It cannot change orders that were already placed with this permission alone
What a bad day looks like
It could complete a draft as paid when no money came in, and you might ship goods you were never paid for.
Set it up safer
- Grant read_draft_orders if it only needs to look at drafts
- Ask for an approval step before it completes any draft as paid
Ask the company selling the agent
- Will it ever mark an order as paid? In what cases?
- Who reviews a draft before it becomes a real order?
Source
Checked against Shopify documentation on 2026-09-28. All Shopify permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.