# Is it safe to connect an AI assistant to my store?

> How we protect the connection, which changes wait for your yes, what happens at once, and how undo works.

AI assistants can make mistakes, so no connection is free of risk. You approve the connection in Shopify admin, and one click ends it. A change to a live bundle or cart goes in two steps, so your assistant can show it to you first. Undo reverses assistant changes for 30 days. Some things happen at once, like switching an item on or off and a Plus store's first cart. So read what your assistant shows you before you say yes.

Asking about AI Pages? That's a separate feature, and a build never goes live by itself. See [Will AI Pages change my live store?](https://section-store.orka.help/a/will-ai-pages-change-my-live-store)

## How we protect the sign-in

- **You approve inside Shopify admin.** Shopify's login proves you work in that store.
- **One browser, start to finish.** A link to the approval page can't hand access to someone else.
- **We warn about websites we don't know.** The yellow warning shows when a sign-in returns to a website we don't know. We recognize Claude, ChatGPT and Grok by where their sign-in returns, so another website can't pass as them without the warning. Apps on your computer, like Cursor or Claude Code, show no warning.
- **Tokens are limited.** They work only for your store and our server. Access lasts 1 hour and renews by itself. We store tokens only in hashed form.
- **You can end it at any time.** One click on **Disconnect** stops it. Uninstalling the app ends every connection too.

## What waits for your yes

These go in two steps:

- Changing a bundle that is on.
- Changing the live cart.
- Deleting a bundle that is on.
- Starting or ending an A/B test.

The first step saves nothing. The assistant gets a list of changes and, for most of these, a picture. It's told to show you and wait for your yes. Then it confirms within 15 minutes, and we save exactly what it previewed.

The yes happens in your chat, so your assistant does the asking. Our check makes sure the change it saves is the one it previewed.

## What happens at once

These have no second step:

- Switching a bundle or cart on or off.
- Changing a bundle or cart that is off.
- Deleting a bundle or cart that is off.
- Undoing a change.
- Creating a bundle or cart. New items start off. The one exception is a Plus store's first cart, which goes live at once with its rewards.

Assistants are told to ask you before they switch a cart on, delete a bundle or cart, or undo a change.

## Undo

Ask a connected assistant to undo a change to a bundle or cart. It works for 30 days. Undo goes newest first, and it refuses to overwrite work someone did since.

## What else we check

- **Text stays plain.** Text fields refuse HTML, so an assistant can't put markup on your store.
- **Ids are checked.** Products, variants and collections must exist in your store.
- **The live cart can't be deleted.**
- **Size limits** stop an assistant stuck in a loop. It can't add past 250 bundles or 50 carts.

## Worth a look from you

- **Reward tiers change what checkout charges.** Check the threshold and discount before you agree.
- **Custom CSS is the one place assistants write code.** It changes how your bundle or cart looks, so check the preview.
- **Anyone with your assistant account can use the connection.** Keep that account secure.

## Good habits

1. Only approve a sign-in you started yourself.
2. Read the list of changes before you say yes.
3. Try big changes on a copy, or run an A/B test.
4. Disconnect assistants you no longer use. **Last used** on the **AI assistants** page helps you spot them.

## Related

- [What can an AI assistant see in my store?](https://section-store.orka.help/a/what-can-an-ai-assistant-see-in-my-store)
- [Approve or decline an AI assistant connection](https://section-store.orka.help/a/approve-or-decline-an-ai-assistant-connection)
- [Change a live bundle or cart with ChatGPT, Claude or another AI assistant](https://section-store.orka.help/a/change-a-live-bundle-or-cart-with-an-ai-assistant)
- [Undo a change an AI assistant made](https://section-store.orka.help/a/undo-a-change-an-ai-assistant-made)
- [Disconnect an AI assistant](https://section-store.orka.help/a/disconnect-an-ai-assistant)
- [AI assistants guide](https://section-store.orka.help/a/support-guide-ai-assistants)

*Also searched as:* is mcp safe, is the assistant safe, safe to connect ai, can ai break my store, trust ai with my store, mcp security, assistant security, token security, oauth tokens, protect my store from ai, ai mistakes, assistant risk, secure connection, hashed tokens, does ai need my yes, could the ai wreck my store, could ai break my live store, is the ai safe, ai change my live store, will ai mess up my store, ai ruin my store, yellow warning we dont know this app, should i be worried about the warning, is this safe