Skip to main content

​
Safe Bulk quickstart

​
What is Safe Bulk?

Pcnaid Safe Bulk is a standalone Shopify embedded app for governed catalog changes. It runs as a Cloudflare Worker with PostgreSQL. Merchants can group work in projects, import product CSVs or run reusable playbooks, inspect field-level diffs and risk scores, collect approvals, execute through Shopify, and roll back from captured snapshots.

​
App identity

  • App name: Pcnaid Safe Bulk (the name shown in the app; the Shopify app configuration name is BulkAI)
  • App handle: pcnaid-safe-bulk
  • Embedded: true

​
Access scopes

The app requests the following Shopify API access scopes:
  • read_products
  • write_products

​
Extensions

The app has no UI extensions, theme app extensions, or POS extensions. It runs as an embedded app within the Shopify admin.

​
OAuth and authentication

OAuth redirects to the app’s /auth/callback route. The app uses Shopify App Bridge bearer tokens for authenticated API requests. All API routes under /api require a valid session.

​
Integration points

​
API

The app exposes a REST-style workflow API under the /api prefix covering onboarding, projects, CSV imports, change sets, playbooks, jobs, staff roles, and privacy exports. Subscription status and actions use the separate /billing route group. See the API reference for the full surface.

​
Webhooks

The app subscribes to these Shopify webhook topics:
  • app/uninstalled
  • app_subscriptions/update
  • customers/data_request (privacy compliance)
  • customers/redact (privacy compliance)
  • shop/redact (privacy compliance)
Webhook endpoint: /webhooks/shopify

​
Public routes

  • GET /health — health check returning app identity and build SHA
  • GET /sitemap.xml — XML sitemap
  • GET /robots.txt — robot exclusion rules
  • GET /support — public support page
  • GET /privacy and GET /terms — HTTP 301 redirects to docs.pcnaid.com

​
Sign-in model

Staff sign in through Shopify’s own authentication. The app does not implement its own sign-in page. Shopify App Bridge provides session tokens that establish staff identity and shop tenant. Role-based authorization (operator, approver, executor, admin) is applied on top of session authentication.

​
Getting oriented

  1. Read the architecture overview for the runtime, tenant model, and workflow design.
  2. Review the API reference for the complete endpoint surface.
  3. See the merchant guides for the store-facing workflow.