Is it safe to connect Shopify or Stripe to Desk?
Yes, it's built to be. Desk only accepts read-only keys, looks up records only for a visitor who has proved their email, and keeps a short, fixed list of fields. The AI never gets your keys or direct access to your store.
How does Desk know the visitor is who they say they are?#
Before any lookup, the visitor verifies their email with a 6-digit code, or your site passes a signed token for someone who's already signed in. Lookups only ever use that verified email, so nobody can see someone else's orders or invoices. Verification lasts up to 24 hours, or 2 hours without a message.
Can the assistant change orders or issue refunds?#
No. Desk refuses a Shopify token with any write permission and a full Stripe secret key; only a read-only token (read_orders) or a restricted key (rk_…) works. Refunds and changes are answered with a link or handed to your team.
What can the assistant see?#
| Connector | What it sees |
|---|---|
| Shopify | Recent orders: status, items, total, shipping and tracking links |
| Stripe | Subscriptions, plan, renewal date and recent invoice links |
| Cal.com | Upcoming bookings with reschedule and cancel links |
| Custom HTTP | Up to 20 facts from your own API |
Addresses, phone numbers and card details are never read.
Where does the data go?#
Desk calls Shopify or Stripe from your server. The short result is added to that one AI request, so it reaches ModelRiver and the AI provider your workflow uses, and the answer is saved in the conversation. Your keys stay on your server, encrypted.
Can I see what was looked up?#
Yes. Every lookup is listed with a masked email and its result, and your team sees it on the conversation.
Do I need Shopify or Stripe webhooks?#
No. Desk asks Shopify or Stripe at the moment the visitor asks, so answers are always current and there's no webhook endpoint to set up.