> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pcnaid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Safe Bulk quickstart

> Get oriented with Pcnaid Safe Bulk — app identity, access scopes, extension list, and public integration points.

# Safe Bulk quickstart

## What is Safe Bulk?

Pcnaid Safe Bulk is a standalone Shopify embedded app for governed catalog changes. It runs as a Cloudflare Worker with PostgreSQL. Merchants can group work in projects, import product CSVs or run reusable playbooks, inspect field-level diffs and risk scores, collect approvals, execute through Shopify, and roll back from captured snapshots.

## App identity

* **App name:** Pcnaid Safe Bulk (the name shown in the app; the Shopify app configuration name is `BulkAI`)
* **App handle:** `pcnaid-safe-bulk`
* **Embedded:** true

## Access scopes

The app requests the following Shopify API access scopes:

* `read_products`
* `write_products`

## Extensions

The app has no UI extensions, theme app extensions, or POS extensions. It runs as an embedded app within the Shopify admin.

## OAuth and authentication

OAuth redirects to the app's `/auth/callback` route. The app uses Shopify App Bridge bearer tokens for authenticated API requests. All API routes under `/api` require a valid session.

## Integration points

### API

The app exposes a REST-style workflow API under the `/api` prefix covering onboarding, projects, CSV imports, change sets, playbooks, jobs, staff roles, and privacy exports. Subscription status and actions use the separate `/billing` route group. See the [API reference](https://docs.pcnaid.com/nodes/shopify/safe-bulk/developer/api/index.md) for the full surface.

### Webhooks

The app subscribes to these Shopify webhook topics:

* `app/uninstalled`
* `app_subscriptions/update`
* `customers/data_request` (privacy compliance)
* `customers/redact` (privacy compliance)
* `shop/redact` (privacy compliance)

Webhook endpoint: `/webhooks/shopify`

### Public routes

* `GET /health` — health check returning app identity and build SHA
* `GET /sitemap.xml` — XML sitemap
* `GET /robots.txt` — robot exclusion rules
* `GET /support` — public support page
* `GET /privacy` and `GET /terms` — HTTP 301 redirects to docs.pcnaid.com

## Sign-in model

Staff sign in through Shopify's own authentication. The app does not implement its own sign-in page. Shopify App Bridge provides session tokens that establish staff identity and shop tenant. Role-based authorization (operator, approver, executor, admin) is applied on top of session authentication.

## Getting oriented

1. Read the [architecture overview](https://docs.pcnaid.com/nodes/shopify/safe-bulk/developer/architecture-overview.md) for the runtime, tenant model, and workflow design.
2. Review the [API reference](https://docs.pcnaid.com/nodes/shopify/safe-bulk/developer/api/index.md) for the complete endpoint surface.
3. See the [merchant guides](https://docs.pcnaid.com/nodes/shopify/safe-bulk/merchant/guides/index.md) for the store-facing workflow.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.