Connect once and the bot stops guessing. It reads real order status and tracking, recommends only products you actually stock, and hands shoppers a cart or checkout with the item already in it — on your own domain, through your own checkout.
Shopify retired legacy custom-app tokens in January 2026, so this is a Dev Dashboard app. Give it read_orders and read_products, and turn on protected customer data access — order lookup needs it.
In Tendabot: Settings → Store. We exchange them for an access token ourselves and refresh it automatically every 24 hours, so there is no token to rotate by hand.
One click pulls every active product with its variants, prices, images and stock. Only products that actually changed are re-embedded, so a re-sync on a 1,700-product store costs almost nothing.
A Shopify cart is a cookie on your storefront’s domain, belonging to the shopper’s browser. Nothing on our servers can reach into it — so we do not pretend to. Instead the buttons use Shopify’s own documented cart permalink, the same URL format Shopify gives you for “checkout links”.
That single URL shape gives both buttons: on its own it goes straight to checkout, and with ?storefront=true it lands on the cart page instead. Everything happens on your domain, under your theme, through your checkout and your payment providers.
The visitor also has to confirm the email used at checkout, the phone number on the order, or the delivery postcode — any one of the three. So nobody can walk order numbers to read other people's addresses.
That rule lives in our code and is checked before your store is ever queried. It is not an instruction in a prompt that a determined visitor can talk the AI out of.
Worth knowing before you connect, not after.
No app from the Shopify App Store. You create an app in your own Dev Dashboard, which stays under your control, and paste its Client ID and secret. Cart links themselves need no permission at all — they are public storefront URLs.
Never. Every button opens your own store. We do not see card details, we do not process payments, and we hold no payment credentials. The only thing we generate is a URL your store already knows how to honour.
It is built for large ones — paginated fetch, hash-based delta sync, and vector search over the result. In production it runs on stores of well over a thousand products, and a re-sync only re-embeds what genuinely changed.
Stock is re-checked live before the card renders, so the card shows “Out of stock” and links to the product page instead of offering a Buy now that would fail. It is worth the extra fraction of a second at the moment someone is about to spend money.