Shopify Trigger

Triggers a workflow when events occur in your Shopify store. Webhooks are automatically registered with Shopify when the workflow is published — no manual setup required.

Requires a Shopify connection with valid client credentials.

Configuration

Field	Description	Notes
Connection	Shopify connection to use	Required
Webhook Topics	Which events to listen for	Required. Multiple selection — one Shopify webhook is registered per topic

Supported Topics

Topic	Description
orders/create	Order created
orders/updated	Order updated
orders/paid	Order marked as paid
orders/cancelled	Order cancelled
orders/fulfilled	Order fulfilled
orders/partially_fulfilled	Order partially fulfilled
orders/delete	Order deleted
draft_orders/create	Draft order created
draft_orders/update	Draft order updated
draft_orders/delete	Draft order deleted
products/create	Product created
products/update	Product updated
products/delete	Product deleted
customers/create	Customer created
customers/update	Customer updated
customers/delete	Customer deleted
fulfillments/create	Fulfillment created
fulfillments/update	Fulfillment updated
refunds/create	Refund created
inventory_levels/update	Inventory level updated
inventory_items/create	Inventory item created
inventory_items/update	Inventory item updated
inventory_items/delete	Inventory item deleted
checkouts/create	Checkout created
checkouts/update	Checkout updated
carts/create	Cart created
carts/update	Cart updated
collections/create	Collection created
collections/update	Collection updated
collections/delete	Collection deleted
shop/update	Shop settings updated
app/uninstalled	App uninstalled

Output

The trigger passes the full Shopify webhook payload to downstream nodes:

Field	Description
body	Parsed JSON payload from Shopify
headers.X-Shopify-Topic	The webhook topic that fired
headers.X-Shopify-Shop-Domain	Store domain that sent the event
headers.X-Shopify-Hmac-Sha256	HMAC signature (already verified before the workflow runs)

How It Works

1. You configure the trigger with a connection and one or more topics.
2. When you publish the workflow, the system creates one Shopify webhook subscription per selected topic, pointing at your workflow's unique callback URL.
3. When you re-publish or delete the workflow, the old webhooks are cleaned up and new ones registered.
4. Every incoming webhook is verified with HMAC-SHA256 using the connection's client secret before the workflow runs. Requests with missing or invalid signatures are rejected with 401 Unauthorized.

Security

All Shopify webhook deliveries are authenticated by comparing the X-Shopify-Hmac-Sha256 header against a signature computed from the raw request body and your app's client secret. The client secret never leaves the backend — it is loaded from the connection at publish time and stored on the webhook record for verification.