What can an AI agent do with
Create gift cards?
It can create gift cards with a starting value and give them to customers. Customers can spend gift cards in your store like money.
How to spot it
On a Shopify connection or settings screen, this is write_gift_cards.
With it, an agent can
- Create gift cards with a starting value
- Assign a gift card to a customer, or leave it unassigned
- Change details like the expiry date, or deactivate a gift card
- Read your gift cards
It cannot, on its own
- It cannot refund orders with this permission alone
- It cannot add or remove money on an existing gift card with this permission alone
What a bad day looks like
It could create gift cards worth real money for the wrong person, and those cards can be spent in your store.
Set it up safer
- Grant read_gift_cards if it only needs to check balances
- Ask for an approval step before it creates any gift card
Ask the company selling the agent
- When would it create a gift card on its own?
- Is there a cap on gift card value it can create?
Source
Checked against Shopify documentation on 2026-09-28. All Shopify permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.