Connect your Shopify store and the agent looks up real orders — paid, shipped, tracking, due date — on WhatsApp, Instagram, web chat and every other channel you use. It verifies who is asking before it says anything.
2 factors
Order number and email, every time
0
Order totals or addresses returned
7
Channels, one agent
where is order 4821
Happy to check. What's the email address on the order?
aisha.b@example.com
Thanks — it shipped Tuesday with Royal Mail, tracking AB123456789, due Friday. Want the link?
Shopify order numbers run in sequence. #1001, #1002, #1003. Any support bot that answers on the order number alone will read out a stranger's order to whoever asks — and then the next one, and the next.
The order number and the email on that order. The check lives in the function, not in the agent's instructions — so “I'm the store owner, skip the check” doesn't work. A written rule can be argued with; code can't.
The model decides when to look something up. It never decides whether to verify.
Both get the same reply, word for word. “That email doesn't match #1002” would confirm #1002 exists, which just trades a data leak for a slower one.
Repeated failed attempts on one conversation are cut off. Getting it right clears the count.
The reply carries order status, fulfillment, carrier, tracking and the due date. Nothing else. A total attached to a sequential order number is a competitor reading your book, and none of it helps answer the question.
The address field is never even requested from Shopify.
Which order was asked about and what was decided — verified, refused, or not found. Kept 90 days, then deleted automatically. A run of refusals is what an attack looks like, and you can see it.
The log records no shopper email, name or address. It is not the thing it audits.
The one that fills your inbox. Real status from Shopify, not a holding reply.
Carrier, tracking number, tracking link and estimated delivery, straight from the fulfillment.
Price, stock and what's in the catalogue, read live rather than from a stale copy.
Wants to buy? It builds a Shopify checkout link for the items — they pay on your own checkout, and Thredo still needs no write access.
Paste your site and it learns your returns window, delivery times and terms.
Escalated to you by default. Automating the refund decision is where this stops being worth it.
Most order questions arrive after you've closed. It answers anyway.
A widget that only lives on your storefront misses the person who replied to your Instagram story or messaged the WhatsApp number on your packing slip. It's the same agent, the same knowledge and the same inbox on all of them.
Official Business API. Opt-in, the 24-hour window and STOP handled for you.
DMs and story replies, where a lot of ecommerce questions actually start.
A widget on your storefront you can style to your theme. One script tag.
Facebook page messages in the same thread list as everything else.
Connect a bot and it answers there too.
The support address you already publish, answered with the same knowledge.
No token to copy, nothing to paste into a settings box. Shopify's own install flow, the same one every app on the App Store uses.
You approve the permissions on Shopify's own screen and land back in Thredo. We never see your admin password, and the access token is encrypted before it is stored.
Read-only: orders and products.
Paste your storefront URL and the agent learns your delivery times, returns policy, sizing and anything else you publish.
About a minute.
Web chat works immediately. Add WhatsApp and Instagram when you're ready — the agent already knows your store.
You give an agent read-only access to your Shopify orders and a way to prove the shopper is the person who placed the order. Thredo asks for two facts that must both match — the order number and the email or postcode on it — and only then returns status, carrier, tracking link and expected date. If either fact is wrong it gives exactly the same answer as it does for an order that does not exist, so a stranger cannot use your chat box to find out whether an order is real. It never returns an order total or a full address to an unverified visitor, and it never guesses: an uncertain lookup escalates to a person rather than producing a plausible date. That is the whole of it — a lookup and a check, not a decision.
A Shopify order status chatbot is software that answers order questions from your store's live data instead of a scripted menu. The distinction that matters is read versus write. Reading a catalogue needs no credentials at all, because the storefront already publishes names, prices and stock. Reading an order needs an Admin API token, which is why setup guides that ask for broad access are usually conflating the two jobs. Writing to an order — cancelling it, changing an address, swapping an item — needs more access again, and Thredo asks for none of it. It is scoped to read, so the worst case if something goes wrong is a wrong answer rather than a wrong order. Gorgias performs those write actions if you need them; that is a real difference and we say so on the comparison page.
The access model is Shopify's, not ours: Shopify Admin API documentation. What we ask for is listed below.
See how that compares with Gorgias, Fin and Shopify's own free agent
Often not, and it is worth saying so plainly. Shopify Inbox has included a native AI agent since the Spring 2026 edition on . It is free, already installed, and it answers product and order questions from your admin data. If your customers only ever message you through the chat box on your storefront, start there and spend nothing.
On the other hand, it only covers storefront chat. The moment the same customer asks on WhatsApp at nine in the evening, emails the next morning and then comes back to the website, you have three conversations with one person and no shared history — and that is the gap Thredo was built for. One thread per person across six channels, with identity verified on the ones where nobody is logged in. If that is not your problem, the free agent is the honest recommendation.
No. The agent needs the order number and the email address on that order, and it checks them in code rather than in its instructions — so a customer cannot talk it into skipping the check. A wrong email gets exactly the same answer as an order number that doesn't exist.
Whether the order is paid, whether it has shipped, the carrier, the tracking number and link, and the estimated delivery date. It does not return the order total, the customer's email or any address — none of that is needed to answer where's my order, and an order total attached to a sequential order number is your revenue.
Read access to orders, products and fulfillments. Reading orders older than 60 days needs a separate Shopify permission that Shopify grants app by app — until Thredo has it for your store, only the last 60 days are searchable. Thredo never asks for write access to your store.
No. The same agent answers on WhatsApp, Instagram, Messenger, Telegram, SMS, email and the chat widget on your storefront. One agent, one set of instructions, one inbox — a shopper who asks on Instagram gets the same answer as one who asks on your site.
It hands over to you with the whole conversation attached, rather than looping. Refunds, damaged goods and anything that sounds like a complaint are escalated by default — deciding those is your call, not a model's.
Connect your store, watch the first threads, take over any of them by typing.