CONNECT YOUR AI
TO WHATFLOW.

• Install the WhatFlow app on your Shopify store and connect your WhatsApp number.
• Open AI Connections in the WhatFlow Shopify app. It shows the MCP server URL, lets you create a connect code, lists connected AI apps and shows recent AI activity.
• Chat tools (reading conversations, replying, labels, notes, catalog and broadcast drafts) need Live Inbox to be turned on. Without it, the AI can still look up orders, list templates and read analytics and automation status.

1. In Claude, open Settings → Connectors.
2. Choose Add custom connector.
3. Name it WhatFlow and paste the URL https://mcp.whatflow.tech/mcp.
4. Click Connect. A WhatFlow sign-in page opens: sign in and choose what Claude may do.
5. Back in Claude, enable the WhatFlow connector in a chat and ask something like "Which WhatsApp chats are unread?"

1. Open ChatGPT on the web and go to Settings → Apps & Connectors → Advanced. Turn on Developer mode. On Business or Enterprise plans a workspace admin may need to allow it first, and some plans only allow read-only custom apps.
2. Back in Apps & Connectors, click Create.
3. Name it WhatFlow, paste https://mcp.whatflow.tech/mcp as the MCP server URL and choose OAuth.
4. Click Create, then Connect. A WhatFlow sign-in page opens: sign in and choose what ChatGPT may do.
5. In a new chat, turn on WhatFlow from the + menu and ask, for example, "Triage my unread WhatsApp chats".

Add WhatFlow to your mcp.json: ~/.cursor/mcp.json for all projects, or .cursor/mcp.json inside one project.

{
  "mcpServers": {
    "whatflow": {
      "url": "https://mcp.whatflow.tech/mcp"
    }
  }
}

Save the file. WhatFlow appears in Cursor's MCP settings; when Cursor asks you to sign in, the WhatFlow sign-in page opens in your browser.

Prefer not to sign in through the browser? Use an API key instead.

When an AI app connects, WhatFlow shows its own sign-in page. There are two ways in:

• Live Inbox login. Enter your store (your-store.myshopify.com), your Live Inbox username or email, and your password. The AI app then acts as you, with your role.
• Connect code. In the Shopify app, go to AI Connections → Generate connect code and type the 8-character code (like K7F2-9QXD). A code works once and expires after 10 minutes. It connects as the store admin, which is useful if you don't use Live Inbox.

Then pick what the app is allowed to do:

• Assistant (recommended). Read chats, orders and templates, label and assign chats, and write replies. With draft mode on (the default), replies wait in Live Inbox until a team member presses Send.
• Read only. Look at chats, orders, templates and analytics, but never reply. The Shopify app lists the connection as "Read only".
• Choose exactly. Pick individual permissions from this list:

• Read Live Inbox conversations
• Label, assign and add private notes
• Reply to customers
• Read WhatsApp templates
• Send approved templates
• Create broadcast drafts (never sends them)
• Search the WhatsApp catalog
• Look up Shopify orders
• Read messaging analytics and failures
• Read automation status

Team members with the agent role can only allow conversation and reply access (reading and organising chats, replying, and reading or sending templates).

WhatFlow gives the AI 16 tools. It only sees the ones you allowed when signing in, and chat tools only appear when Live Inbox is on. The AI picks the right tool from your request, so you can simply ask in your own words.

Messages written by customers are passed to the AI as untrusted content, and the AI is told never to follow instructions inside them.

• When the AI replies or sends a template, the message is checked like a real send, then saved as a draft in that chat in Live Inbox.
• A team member can edit the draft, send it, or discard it.
• Draft mode is on by default for every new connection and API key.
• Only admins can turn it off. Connections made by agent-role team members always use draft mode.
• The AI Connections page shows each app as Drafts, Sends directly or Read only.

WhatsApp has two kinds of outgoing messages, and the AI follows the same rules your team does:

• Free-text replies (text, buttons, lists, links, products) only work within 24 hours of the customer's last message. They do not check your blocklist, the same as replies from your team.
• Templates are your Meta-approved messages and can be sent after the 24-hour window has closed. Templates sent by an AI app respect your blocklist: numbers on it are skipped.

If the AI sends a lot of messages in a short time, WhatFlow pauses it and asks it to wait a minute before sending again.

Connecting an AI app is free. Reading chats, looking up orders, checking analytics and creating drafts cost nothing.

Only WhatsApp messages that are actually sentcount toward your plan, the same as messages your team sends. A draft that a team member approves counts as that person's reply. A discarded draft is never sent and never counted.

For n8n, Make or your own scripts, create an API key in AI Connections → API keys. Give it a name, choose its allowed actions and decide on draft mode (on by default). The key starts with wf_live_ and is shown only once, so copy it somewhere safe.

Send it with every request to https://mcp.whatflow.tech/mcp as a header:

Authorization: Bearer wf_live_…

For Cursor or any other app that reads an mcp.json file, the same key goes in headers:

{
  "mcpServers": {
    "whatflow": {
      "url": "https://mcp.whatflow.tech/mcp",
      "headers": {
        "Authorization": "Bearer wf_live_…"
      }
    }
  }
}

Treat the key like a password. Anyone who has it can use the actions you allowed.

Everything is managed in the Shopify app under AI Connections:

• Connected AI appslists each app, who signed in (or "Store admin" for a connect code), whether it sends drafts, sends directly or is read only, when it was last used, and whether its last call failed. Press Disconnect to cut it off. Reconnecting the same app replaces its old entry.
• Under API keys, press Revoke to stop a key from working.
• Uninstalling WhatFlow from Shopify disconnects every AI app and revokes every key.

Recent AI activitylists every action an AI app takes: what it did (for example "send message · conversation 123" or "lookup order · #1042"), which app did it, the result (ok, drafted or an error such as rate limited) and when.

• Opening the MCP URL in a browser shows 401.That's expected: the server only answers signed-in AI apps.
• The AI app keeps loading after you press Allow. Disconnect WhatFlow in the Shopify app under AI Connections, remove it in the AI app, then connect again. A fix for this went live on 29 October 2026.
• The AI can see data but can't reply. The connection is read only. Reconnect and choose Assistant. In ChatGPT, also check whether your plan allows write actions in custom apps.
• No chat tools appear. Live Inbox is turned off for your store. Turn it on in the WhatFlow Shopify app.
• "Connect code is wrong, expired or already used". Codes work once, for 10 minutes. Generate a new one.