Security, with clear boundaries.

Account access

Sign-in uses email codes or an identity provider. Browser sessions use HttpOnly cookies and state-changing browser requests require same-origin and CSRF checks. Workspace membership is checked at the API and document store.

Agent permissions

MCP connections use OAuth authorization codes with S256 PKCE. Each grant is restricted to one theme, with read-only or checked-edit permission. Access tokens last one hour; refresh tokens rotate and expire after seven days. Raw token values are not stored in the database.

Requests check connection status, account status and workspace membership. The endpoint supports a bounded set of typed edits, with history, idempotent retries and a workspace sequence check. It does not provide sending or Shopify-installation tools.

Your controls

Review and revoke connections under your account menu. Signing out the authorizing session revokes its connections. Review drafts, test previews and choose when to export.

These are implementation details of the current build, not a security certification. Independent review, production configuration and a published vulnerability-reporting address are release requirements.