In the Claude connector directory: AIOD Discounts & Free GiftServer URL (only needed for a manual custom connector):
https://aiod-automatic-discount.com/mcpConnect it
1
Add the connector
AIOD is listed in Claude’s connector directory. Open the AIOD Discounts & Free Gift listing and click Connect — there is nothing to copy or paste.You can also find it from Settings → Connectors inside Claude, or add it as a custom connector with the server URL above.Claude works out the rest on its own and opens a browser tab.
2
Type your store domain
your-store.myshopify.com, or just the store handle. This only decides which Shopify admin you get sent to.3
Approve inside your Shopify admin
Shopify signs you in and shows the AIOD approval screen. This is the step that connects your store — nothing you typed earlier did.Read it before approving. It names the app that is asking and the address your access will be sent to. The name is self-reported and unverified; the address is checked against a registered list and cannot be faked.
4
Back to Claude
You are returned with the connection live. If your browser blocks the redirect, click the link on screen.
What Claude can do
Seven tools, and no general Shopify access behind them.The two write tools, explained plainly
This is the part worth reading carefully.Drafting creates nothing
When Claude drafts a discount, it builds the configuration, checks it against AIOD’s rules, runs it through a simulated cart, and gives you a link. No discount exists in Shopify. Nothing exists until you open that link and save it yourself. This is what Claude does by default. If you would rather it never touch your store at all, just say “draft it, don’t create it”.Creating puts a real discount in test mode
If you ask Claude to create the discount, it makes a genuine Shopify discount — but in test mode. Test mode is not a dry run. The discount really exists and Shopify really evaluates it at checkout. What makes it safe is that AIOD attaches an email condition when it creates it, so it only ever applies to your store’s test email address. Claude tells you that address. Real shoppers are unaffected. It stays that way until a person opens it in AIOD and switches it to active. Claude cannot do that — there is no tool that makes a discount live.What Claude cannot do
- It cannot make a discount live, or take one out of test mode.
- It cannot delete a discount.
- It cannot read your orders, customers, or products. Performance comes back as totals only.
- It cannot reach any store other than the one you approved.
- It cannot see discount codes, or discounts you made directly in Shopify or with another app.
What data leaves your store
Only what those seven tools return: your AIOD discount setups (names, templates, conditions, rewards, dates, status) and aggregate revenue and order-count figures. No customer personal data. Performance reporting returns totals and a chart series — never orders and never customer records. There is no tool that can list either. One honest exception: if you configured a discount with something personal in it — a customer segment name, an email condition — then reading that discount returns those values, because they are part of the discount.Who else sees it
- Anthropic. Tool results become part of your Claude conversation and are handled under Anthropic’s terms and your organization’s Claude settings.
- Documentation search. When Claude searches these docs, your search words go to AIOD’s documentation site. Search words only — no store data is attached.
What AIOD keeps
Tokens are never stored in a readable form and cannot be recovered after they are issued — only revoked. Sign-in codes are single-use and expire in five minutes.
Security
- You approve inside Shopify. The approval screen runs in your own Shopify admin under AIOD’s normal login. That session is the only thing that decides which store is connected — not the domain you typed, and not anything Claude sent.
- One token, one store. Each connection maps to a single Shopify session. There is no way to point a request at a different store.
- Modern OAuth, no shared secrets. OAuth 2.1 with PKCE,
S256only — the server refuses weaker methods outright, so a client cannot negotiate down. No client secret is issued, so none can leak. - Return addresses are checked twice — when the connector registers, and again on every sign-in. They must be secure (
https) or local. - Refresh tokens rotate. Using one immediately invalidates it. A stolen one stops working the moment your real client next refreshes.
- Short sessions. Access expires after an hour.
Good to know
- A single request has to finish within 60 seconds.
- Supported MCP protocol revisions:
2025-06-18,2025-03-26,2024-11-05. - If AIOD is uninstalled or its Shopify session breaks, tools tell you to reconnect rather than failing silently.

