Test order refunds and cancellations against a simulated Shopify store that fails on purpose. In production, COLVO holds the Admin API token, applies your limits and checks every result in your store.
#1042, partial refunds, cancel + refund, another customer’s order, and lost responses.read_orders, write_orders and read_customers. Paste the store address and the Admin API token (shpat_…); COLVO checks the scopes without changing anything.refunds/create, orders/cancelled) with the URL COLVO shows and paste the signing secret. Refunds and cancellations made outside COLVO open an incident.refund.create payment_id = the order (#1042, numeric id or gid), amount_minor, currency → a refund on the order (nothing restocked)
order.cancel order_id, refund: true | false, restock?, reason? → cancels the order; with refund, what is left on it
Not on Shopify: subscription actions (subscriptions live in Shopify apps), plan changes, couponsThe agent never holds your payment keys — it proposes, COLVO decides and executes.
Mandates list the orders this conversation may touch (subject.order_ids). An agent that names another customer’s order is denied before anything is sent.
COLVO reads what is still refundable on the order before deciding, so the limit applies to the real amount — and the refund can’t be sent twice as a cancel plus a separate refund.
Shopify takes no idempotency keys. COLVO marks every refund note with its operation id and looks for it before any retry, so a lost response can’t become a second refund.
No — remove it. Only COLVO’s executor uses the token, encrypted per organisation.
`read_orders`, `write_orders` and `read_customers`. COLVO warns about any other scope on the token.
Not yet: Shopify subscriptions live in third-party apps (Recharge, Loop…). COLVO refuses subscription actions on a Shopify connection.
Yes — connect a development store first; a live store is a separate connection.
Reference: Mandates & connections · Webhooks
Test your agent before it ships — and guard every real action once it’s live. In a safe copy of your world first.