🔌 Module 1 · Connect Grok
Wire Grok into Shopify Admin
Grok can run your store ops — but only after Admin auth is wired correctly. This teaser shows the traps; the full click-path stays locked until you subscribe.
Public teaser. Screenshots, OAuth exchange, and configs are subscriber-only.

✨ Public teaser
What free visitors need to know
Connect Grok is Module 1: get Admin API access working so later modules can read/write products, orders, inventory, and themes — without pasting secrets into chat.
Prefix trap
The #1 beginner mistake: putting a
shpss_…value where Shopify expectsshpat_….MCP “ready” ≠ connected
MCP can list tools while every live call still returns 401. Discovery is not auth.
Host literacy
Custom storefront domains are not Admin hosts — you need
YOUR_SHOP.myshopify.com.
Scopes need re-approve
After scopes change, releasing a version is not enough — the merchant must re-approve, often with a fresh token.
Redacted flowchart
Custom domain NO → myshopify host YES · Client secret NO → Admin token YES · Tools listed ≠ store connected.
Secrets stay local
Never paste Client IDs,
shpss_…, orshpat_…into chat. Outcomes only.
🧰 Copyable teaser
Host + prefix cheat sheet
Safe reminders only — no real tokens.
YOUR_SHOP.myshopify.com
# Use the Admin host — not your custom storefront domain. shpss_… → client secret (NOT an Admin token)
shpat_… → Admin access token (X-Shopify-Access-Token) 🗺️ Outline
The flow (titles public, steps locked)
- ★
Public
Auth traps before you touch a token
shpss_…vsshpat_…, myshopify host, and why “tools listed” still 401s.
Locked · Subscribers
Create / open the app in Shopify Dev Dashboard
Organization app, release a version, scopes for later modules.
Locked · Subscribers
Install the app on the target shop
Until install succeeds, client-credentials exchange can return app_not_installed.
Locked · Subscribers
Collect the right credential types (prefix literacy)
Client ID ·
shpss_…client secret ·shpat_…Admin access token.
Locked · Subscribers
Exchange
shpss_→shpat_(client credentials)Post-2026 path against
YOUR_SHOP.myshopify.com— details subscriber-only.
Locked · Subscribers
Set the store domain correctly
Bare host only — no https://, trailing slash, or custom domain.
Locked · Subscribers
Wire Grok Shopify MCP (optional) · Prove auth live · Scope iteration · Stable credential home · Hygiene
Remaining Module 1 steps unlock with subscribe — titles only here.
🔒 Behind the paywall
Full how-to stays closed
Subscribers get the complete Connect Grok guide: Dev Dashboard path, prefix literacy, live auth proof, and 401 vs wrong-host fixes. Guests see this teaser only.
- Dev Dashboard app create / install
- Client credentials →
shpat_…exchange - MCP optional path + live shop proof
- Stable local credential home (no chat pastes)
➡️ Next
Ready to connect Grok for real?
Unlock Module 1, then continue to Grok Bot (shopify.env) and scopes once Admin is live.