Microsoft Copilot security directory
Shopify (Independent Publisher)
Published by Ray Bennett (MSFT)
High risk
REST interface for Shopify's merchants to receive, process, and manage their orders.
Security assessment
Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.
- Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
- Can spend money on your behalf: This connector can initiate charges, orders, or subscriptions. An AI executing these actions could trigger unauthorized financial transactions.
- Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.
Available capabilities
This add-on exposes 4 tools or capabilities.
- Cancel an order
- Retrieves a list of customers
- Retrieves a list of orders
- Updates an order
The interactive security report will load automatically.