Reliable external events into native automation.
FlowRelay is the governed handoff layer for outside events: authenticate the sender, keep receipt facts, and hand the trigger to the native automation your team already uses. Shopify Flow is the first live edition.
External event sources
-
Webhooks
POST /events
200 OK -
ERP systems
inventory.updated
200 OK -
CRM platforms
deal.stage.changed
200 OK
FlowRelay
- Authenticate
- Receipt facts
- Replay context
- Diagnostics
- Governed handoff
Native editions
- Shopify FlowLive
- WixFuture
- StripeFuture
- Additional platformsFuture
Event received
Proof recorded
Verified
Handoff recorded
APIProgrammatic control
CLITerminal operations
MCPAgent context
Receipt facts
Know what happened before recovery begins.
FlowRelay keeps one receipt for what arrived, how it was authenticated, what was validated, and what was handed to Shopify Flow.
- AuthenticationVerify the sender before the event enters native automation.
- Receipt factsRecord arrival, authentication, validation, and handoff in one place.
- Replay contextShow whether retry is available and what to review first.
- DiagnosticsShare support-safe metadata with secrets and payload data redacted.
Receipt facts
fr_rcpt_7k482490
Delivered to Shopify Flow
FlowRelay proves the handoff.
Shopify Flow owns the downstream workflow after it receives the trigger.
Event received
- Endpoint
- Post-purchase sync
- Source
- Order service
- Event
- Payment succeeded
- Received
- Apr 29, 2026 14:22 UTC
Chain of custody
- Received14:22 UTC
- AuthenticatedSender verified
- ValidatedFields ready
- Handed offShopify Flow received
Replay
Eligible
Review side effects before retry.
Diagnostics
Ready
Package is redacted by default.
Secrets
Hidden
Secrets and raw data stay out of proof.
Handoff result
- Status
- Delivered
- FlowRelay proof
- Trigger handed to Shopify Flow
- Downstream workflow
- Owned by Shopify Flow
Access grant
grant_fr_4d90
Active, 29 days left
Humans and authorized agents use the same controlled operations.
No raw payloads, secrets, auth headers, or silent replay actions.
Operator
Human or authorized agent
Access via
API, CLI, MCP
Allowed
Read receipt facts, prepare retry, share diagnostics
Restricted
Raw payloads, secrets, silent replay
Read receipt facts
Allowed
Proof-safe details only
Prepare retry
Review required
Side effects shown first
Share diagnostics
Redacted preview
Redacted package
Governed access
Agent-ready operations, governed like production infrastructure.
Designed from the start for authorized agents to inspect receipts, prepare recovery, and share diagnostics through the same governed safeguards as humans.
UIHuman review and recovery.
APIControlled programmatic access.
CLITerminal access for deliberate recovery work.
MCPAgent context without bypassing controls.
- ScopeLimited grants and explicit approvals for sensitive actions.
- AuditEvery sensitive operation leaves a durable trail.
- RedactionSecrets, auth headers, and customer data stay out of public proof.