Public Shopify App for Automated Configuration & Calling Service

We want to build a public Shopify app that can be installed by any Shopify merchant. Once installed:

The app will automatically capture the merchant's Shopify access token via OAuth.

Our backend will handle all configurations and automation, so merchants do not need to manually interact with APIs.

The app will integrate with our AI calling service, triggering calls or other workflows based on Shopify events.

Minimal UI is required only for settings, dashboards, and monitoring; most work happens in the background via APIs and webhooks.

Key Objectives

Public App Installation

Any Shopify merchant can install the app from the Shopify App Store or via an install link.

Upon installation, the app captures the Shopify OAuth access token and saves it in the database.

Automated Configuration

The app will automatically apply preset configurations to each merchant’s store.

Configurations include features, workflow automation, and default settings that the merchant receives immediately after installation.

Webhook Integration

Subscribe to Shopify webhooks (e.g., orders/create, customers/update) to trigger backend workflows automatically.

Webhooks should be verified using Shopify’s HMAC signature for security.

API & Token Management

Store tokens securely in the database linked to the merchant’s shop domain.

Use these tokens to call Shopify Admin APIs on behalf of the merchant for automation tasks.

Merchants do not need to interact with the API directly.

Embedded Dashboard
Minimal UI embedded in Shopify Admin for:

Viewing app status

Managing configurations (optional)

Viewing logs of automated actions (calls, updates, etc.)

AI Calling Service Integration

The app will send Shopify event data (like new orders or customer info) to our AI calling service.

AI calls/actions are executed automatically based on the stored configuration for each merchant.

Security & Compliance

All communication with Shopify must be over HTTPS.

OAuth flow and token storage must follow Shopify best practices.

Webhooks must be verified to prevent unauthorized requests.

Technical Requirements

Backend: Node.js (or similar, scalable backend framework)

Frontend: Embedded Shopify app (React or any suitable framework)

Database: Any secure DB to store tokens, configurations, logs (PostgreSQL/MySQL/MongoDB)

Hosting: HTTPS domain required for App URL

Optional Dev Setup: ngrok support for local development/testing

Flow Diagram (Conceptual)

Merchant installs the app → Shopify redirects to App URL

Backend runs OAuth → captures token → stores in DB

Backend applies predefined configuration to merchant’s store

Shopify triggers webhooks (orders, customers, etc.) → backend processes → AI calling service triggered

Dashboard inside Shopify Admin shows logs/status (optional)

Deliverables

Fully working public Shopify app deployable on any merchant store.

OAuth integration to capture and store access tokens securely.

Webhook handlers for Shopify events.

Integration with AI calling service based on merchant configurations.

Minimal embedded Shopify dashboard for monitoring.

Documentation for setup, deployment, and configuration.

Skills Required for Freelancer

Shopify App Development (OAuth, Webhooks, Admin API)

Node.js / Backend development

Database management (PostgreSQL/MySQL/MongoDB)

Frontend experience for embedded apps (React preferred)

Secure token storage and API integration

Optional: Experience with AI calling services or third-party API integration