Vendor’s Guide to Shopify Custom App

This guide is for you a vendor to connect your Shopify store to a Flxpoint customer’s account via a custom app, allowing them to import your store catalog and send you orders. You’ll create the app in your Shopify admin, set the right permissions, and share the necessary credentials and store URL with your FLX contact. Follow these steps to get it done quickly and securely.

 

How to Create Your Shopify Custom App

📋 Phase 1: Access & Navigation +
Goal: Reach Shopify’s Develop apps area to create your custom app.
Log into Shopify Admin
Go to yourstore.myshopify.com/admin and sign in with your credentials.
Navigate to Develop apps
From the left menu: Settings > Apps and sales channels > Develop apps. If prompted, enable custom app development.
🧩 Phase 2: Create the Custom App +
Create the App
Click Create an app. Name it (e.g., FLX Integration) and click Create app.
Tip: Use a recognizable name so your FLX contact knows which credentials belong to this integration.
Save (optional but recommended)
After naming, click Save so your draft app is stored before you configure permissions.
🔐 Phase 3: Permissions & Install +
Set Permissions (Admin API Scopes)
In your app, go to Admin API integrationConfigure. Select only what’s needed (least privilege).
Tip: If unsure, check with your FLX contact before enabling any “write” scope.
Minimum suggested (read-only)
  • read_products
  • read_inventory
  • read_locations
  • read_orders
  • read_fulfillments
Optional (enable only if requested by FLX)
  • write_fulfillments / read_fulfillments
  • write_orders / read_orders
  • write_inventory (only if FLX will update inventory)
  • write_draft_orders / read_draft_orders (if using draft orders)
  • write_customers / read_customers (only if customer records are required)
Save Permissions
Click Save to lock in your choices.
Install the App
Click Install app (top-right) and confirm. This generates your API credentials for your FLX customer.

 

 

Understanding and Sharing Your Credentials

After installing the app, Shopify provides the credentials your FLX customer needs to connect your store. Here’s what to do:

  • View Credentials: Once installed, go to the API credentials tab in your custom app settings. You’ll see:
    • API Key: A string like abc123… — copy this.
    • API Secret Key: A string like xyz789… — copy this too.
    • Admin API Access Token: Starts with shpat_.... Important: This token is only shown once. Copy it immediately and store it securely; if you leave the page, you’ll need to regenerate it.
  • Provide Your Store URL: Include your Shopify store URL in the format yourstore.myshopify.com (exact hostname, no extra paths or trailing slash). Do not send a custom domain like yourstore.com.
  • Share Securely: Send the API Key, API Secret Key, Admin API Access Token, and your .myshopify.com URL to your FLX contact via a secure channel (e.g., encrypted email or a shared vault). Do not post tokens in public channels.

Warning: The Admin API Access Token is critical. If you lose it without sharing it, you’ll need to regenerate it, which might disrupt any existing connection. Double-check that you’ve saved and shared it before navigating away.

 

 

Why This Matters

Creating this custom app lets your FLX customer pull inventory, products, or orders from your Shopify store automatically. You won’t need to manually send updates, and they can work with your data in their system without you ever seeing their Flxpoint interface. It’s a one-time setup that keeps things running smoothly.

 

 

Keeping Control of Your Store

You’re in charge of what FLX can access:

  • Custom Permissions: Only grant the scopes your FLX contact requests. If they don’t need write access, keep scopes read-only.
  • Change Anytime: Need to adjust or revoke access? Go back to Settings > Apps and sales channels > Develop apps, edit the app’s scopes, or delete it entirely to cut off the connection.
  • Your Store, Your Rules: The FLX customer only sees what you allow through these credentials. Nothing else is shared unless you permit it.