Skip to content
Fehrist
Start free
Data export & agent accessMenu

Data export & agent access

Take a full backup of your store, and issue spend-capped credentials for AI shopping agents.

Full store export

Open Settings → Data export and choose Download full export (JSON). You get one file containing every product, customer and order in your store — a complete backup you can keep, archive, or move somewhere else.

Use it when you want to:

  • keep an off-platform backup on your own machine or drive;
  • hand your data to an accountant, analyst or developer;
  • satisfy your own record-keeping policy before a big change.

Looking for a product CSV instead?

The JSON export is a full backup, not a spreadsheet. For catalog work in Shopify's CSV format — bulk edits, migrations, feeds — use Products → Import/Export instead. See Products & catalog.

The export contains personal customer data. Treat the downloaded file the way you would treat your customer database: store it somewhere access-controlled, and delete copies you no longer need. Your obligations around that data are covered in Customer privacy.

Agent access

AI shopping agents are starting to buy on behalf of real people. Agent access lets you take part in that deliberately, on your terms, rather than leaving it to whatever a bot can scrape.

Open Settings → Agent access and issue a token with three things set:

  1. Label — who or what this credential is for, so you can revoke the right one later.
  2. Spend cap — the maximum cart value this agent may assemble.
  3. Expires in (days) — how long it stays valid.

What an agent can and cannot do

A token holder can assemble a cart up to its spend cap and receive a checkout link to hand back to the person it is shopping for. That is the whole scope.

  • It never sees payment details.
  • It cannot access an existing customer's account, order history or saved addresses.
  • It cannot complete a purchase. Payment, address, shipping and tax all run through your normal checkout, finished by a person.

In other words the agent does the shopping, and a human still does the paying. A leaked token costs you a cart, not a charge.

Managing tokens

The list on the same page shows every token you have issued. Delete one to revoke it immediately — do that when an integration ends, when a cap turns out to be too generous, or any time you are unsure where a credential ended up. Tokens also stop working on their own at the expiry you set, so short lifetimes are the safer default.

Related

  • Account & security — protecting the account that issues these credentials.
  • Build apps & themes — the OAuth flow and API scopes for full applications, which are a different thing from an agent token.