Shopify
Access Setup

Two things to switch on, about fifteen minutes together. What each one grants, what it is incapable of reaching, and why the live storefront cannot change without you clicking publish.

yoreh.co · Setup walkthrough · Both steps reversible

Before we start

What This Does
And Does Not Do

Worth two minutes before any clicking. The safety here does not come from us being careful. It comes from the access itself being incapable of the things that would worry you.

What it allows

Reading your product titles, descriptions and SEO text

Reading your pages, blogs and translations

Working on a copy of your theme

Sending you a preview link to review

What it cannot do

See a single order or customer record

Change a price, a product or your inventory

Edit the theme your customers currently see

Publish anything to the live store

The short version We are asking for permission to look at your store content, and permission to work on a duplicate of your theme. Publishing stays with you, as a manual click, every time.

One consequence worth naming upfront Because these are read only, we cannot write SEO titles and descriptions back to your store ourselves. They come to you as a prepared file that you import, which has the useful side effect of leaving you a clean before and after at every step. If you would rather we applied them directly, that means adding a write permission to the same app later. We are not asking for it now, and we would raise it with you properly rather than slipping it in.

Step one of two · about 5 minutes

Theme Access

A free Shopify app that issues a password for working on themes. It is scoped to themes and nothing else, so it is structurally unable to see products, orders or customers. Each person gets their own password, and you can revoke any of them individually.

Theme Access app

Fin sets up Free Themes only

Open the app listing

Go to the address below, or search the Shopify App Store for "Theme Access". It is built by Shopify, so it sits at the top of the results.

apps.shopify.com/theme-access

Install it

Click Install and confirm. The permission screen will mention theme access, which is the entire scope of the app.

Create a password

The app opens to an empty list. Click Create new password and fill in two fields.

Name → Node AI
Email → admin@nodeagency.ai

Why that address Credentials go to our shared role mailbox on our own domain, never to an individual's personal address. It means access does not sit in one person's inbox, it survives anyone changing role, and it is the account you can check against nodeagency.ai. If you ever receive a request like this pointing at a different address, treat it as suspicious and confirm with us through a channel you already use.

Send it across

The password appears once and starts with shptka_. Use the send by email option if it is offered, which generates a secure link that expires after seven days.

If the screen closes first Nothing is lost. Delete that entry from the list and create another one. It takes about twenty seconds and there is no limit on how many you make.

Step two of two · about 7 minutes

Read Only
App Token

This lets us read your product and page content programmatically, so the audit covers all seventy products accurately instead of by hand. Every permission requested is a read permission. None of them can write, and none of them touch orders or customers.

Custom app: Node AI SEO

Fin sets up Free Read only

One requirement This part has to be done by the store owner. Shopify does not allow collaborator accounts to reach this screen at all, so it cannot be handed to us even if you wanted to.

Find the developer settings

Settings → Apps and sales channels → Develop apps

Settings sits at the bottom left of the Shopify admin. The Develop apps button is at the top right of the page that opens.

Unlock app development

If nobody has done this on the store before, there is a screen asking you to allow custom app development. Click Allow custom app development and confirm.

You will see a broad warning here Shopify shows the same generic caution on this screen for every store, regardless of what is being installed. It is unlocking the menu, not granting anything. The actual permissions get chosen on the next screen, and you will see them picked one at a time. This is also a one time flip that never appears again.

Create the app

Click Create an app. Name it Node AI SEO and leave the developer field as your own account. Then Create app.

Choose the permissions

Configuration → Admin API integration → Configure

A long searchable list appears. Search for each of these and tick it. Every one is a read permission.

read_products

read_content

read_online_store_pages

read_themes

read_translations

Each permission appears as a pair, a read version and a write version. Only the read one gets ticked. Then Save.

Worth noticing on this screen There is nothing in that list about orders or customers, and nothing that can write. Those five permissions let us look at your product text and your theme, and that is the whole of it.

Install the app, then reveal the token

API credentials → Install app → Reveal token once

The Install app step is not optional and is easy to miss. Shopify only creates the access token at the moment the app is installed, so until you click it there is nothing to copy. Once installed, click Reveal token once and a string starting with shpat_ appears. Send that through a secure link rather than plain email or chat, the same way as the theme password above.

Three values look similar, only one is the right one The API credentials screen also shows a Client ID and a Client secret starting with shpss_. Neither of those is what to send. They identify the app but cannot read anything from your store. The only value we need is the Admin API access token starting with shpat_. If you cannot see that section at all, the app has not been installed yet, so go back and click Install app.

If Install app is greyed out That means no permissions have been saved yet. Return to the Configuration tab, tick the scopes in the previous step, press Save, and the Install button becomes available.

If the screen closes first The token itself cannot be recovered, but the fix is quick. Uninstall the app and reinstall it from the same page, which issues a fresh one. About thirty seconds, and nothing is broken.

Once access lands

How Theme Work
Actually Runs

A Shopify store can hold many themes, but only one is published. Every other theme sits in your library, invisible to customers, with a private preview link that renders against your real products and prices. That is what we work on. Your live theme is never edited.

Your live theme keeps running

Untouched throughout. Customers see exactly what they see today, for the entire duration of the work.

Nothing changes here

We duplicate it

A copy is made and left unpublished. It carries your current design, settings and content exactly as they are now.

Node AI

All edits happen on the copy

Headings, structured data, crawler rules. Every change lands on the duplicate and nowhere else.

Node AI

You get a preview link

A working version of your storefront with the changes applied, running on your real catalogue. Only people with the link can reach it.

Fin reviews

You publish, by hand

One click in your admin, whenever you are satisfied. If anything looks wrong afterwards, republishing the previous theme puts everything back in seconds, because Shopify keeps it in your library.

Fin only

Being precise about this Worth stating plainly, because it matters. Shopify does not enforce this part. A theme password is able to write to a published theme, and the command to do it exists. What we do is configure our tooling to refuse those commands, so it cannot happen in a hurry or by accident. That is a working practice we hold ourselves to, and you should read it as such rather than as a lock.

The protections you can verify yourself are the ones that matter: your live theme stays in your library untouched, nothing reaches customers without your click, and republishing the previous version restores everything in seconds. If you want a rollback that predates our involvement entirely, duplicate your live theme once before we start and keep it aside.

Whenever you want

Turning It Off

Both grants are independent and revocable at any moment, without our involvement and without affecting anything else on the store.

Two clicks, any time

Open the Theme Access app and delete the Node AI password

Open Settings, Apps and sales channels, and uninstall Node AI SEO

Everything built stays with you. Nothing depends on our access continuing.

ShopifyAccess Setup

Shopify
Access Setup