Shopify Flow Extensions

External webhooks
as Shopify Flow triggers

Start a Shopify Flow workflow from any external system - n8n, Make, Zapier, Stripe, your ERP or a plain HTTP request. Verified signatures, scheduled polling, full history, EU hosting.

Webhook triggersSignature presetsScheduled pollingn8n / Make / ZapierReplies to the callerEU-hosted

How it works

From install to first webhook in minutes

01

Install the app

One-click install from the Shopify App Store. Free tier includes every trigger.

02

Create a webhook trigger

Generate a unique URL with optional HMAC or token auth. Paste it into any system that can POST.

03

Wire it in Flow

Pick your new trigger inside Shopify Flow and connect any action. Done.

Features

Trigger Shopify Flow from anywhere

Bring external events into Shopify Flow with secure, signed webhooks. No custom code, no glue services.

Webhook-based triggers

Any HTTP call becomes a Shopify Flow trigger. You choose which values of the payload land on the trigger fields, and they flow straight into your Flow actions.

Signed and authenticated

HMAC signatures, static header tokens, or one-click presets for Stripe, GitHub, Typeform and the other providers that sign their webhooks. Unauthorized callers never reach Shopify Flow.

Scheduled webhooks

No caller needed: the app fetches a URL every 5 minutes to once a day and starts your workflow with the response - on every fetch, or only when the response changed.

JSON, form and XML bodies

Besides JSON, an endpoint reads form-encoded, multipart and XML bodies, so Twilio, PayPal IPN and plain HTML forms work without a middleman.

Split arrays into runs

A system that batches many records into one call? Name the array and every item, up to 100 per request, starts its own workflow run.

Transform functions

Run your own JavaScript on every request before Shopify Flow sees it: reshape or enrich the payload, drop what you do not want, or answer the caller directly.

Reply to the caller

A workflow can return data to the system that called it, so the sender gets an answer instead of a blind acknowledgement.

Duplicate protection

Name the header that carries the delivery id and a retry within 24 hours is accepted but not run again. A provider retrying never runs your workflow twice.

Full history with replay

Every delivery is stored with its payload, headers, status and attempts. Replay any past delivery, or send a test call from the app.

n8n, Make, Zapier-ready

Step-by-step guides for n8n, Make, Zapier, Stripe, Typeform, Slack, GitHub and many more. Paste your webhook URL and you are sending Shopify Flow events in minutes.

Browser calls and your own domain

Enable CORS per endpoint for calls made straight from a browser, or serve an endpoint on your store's own domain through the Shopify App Proxy.

Developer API and MCP

Create and manage endpoints, replay history and test webhooks from your own tools via a REST API and an MCP server for your AI assistant.

Guides and tutorials

Step-by-step guides from the documentation, for the setups merchants ask about most.

Everything else is in the documentation, and the changelog shows what is new.

Pricing

Simple, usage-based pricing

Start free. Pay annually and save 8%.

Free

$0/month

Try it out

  • ✓Unlimited Webhooks
  • ✓500 Webhook invocations per month
  • ✓Support via E-Mail or Slack
Most popular

Grow

$35/month

Active stores

  • ✓Unlimited Webhooks
  • ✓15000 Webhook invocations per month
  • ✓Support via E-Mail or Slack

Unlimited

$100/month

Enterprise + agencies

  • ✓Unlimited Webhooks
  • ✓Unlimited Webhook Invocations
  • ✓Support via E-Mail or Slack

FAQs

Do I need to write code to use Workflow Webhooks?+
No. You generate a webhook URL inside the app, paste it into any system that can send an HTTP request, and pick your new trigger inside Shopify Flow. Zero code.
How are incoming webhooks authenticated?+
Choose between HMAC-SHA256 signatures (industry standard) or a static header token. Both are configurable per trigger. Requests without valid auth are rejected before they touch Flow.
Where are payloads stored?+
All payloads, headers, and response metadata are stored on Google Cloud in the EU (europe-west1, Belgium), encrypted at rest with Google Cloud KMS. History is automatically cleared after 30 days.
Does it work with n8n, Make, Zapier?+
Yes. Any tool that can send an HTTP POST works. We ship templates for n8n, Make and Zapier in the docs.
Is the app GDPR-compliant?+
Yes. EU-only data residency, signed DPA on request, no third-party tracking on this site. Full details in our Privacy Policy.
Can my workflow return data to the system that called the webhook?+
Yes. A workflow can send a response back to the caller, so external systems can wait for the result instead of only receiving an acknowledgement.
Can a webhook run on a schedule instead of waiting for a call?+
Yes. With scheduled URL polling the app fetches a URL every 5 minutes to once a day and feeds the response into your endpoint - on every fetch, or only when the response changed. That runs a Shopify Flow workflow on a timer from any API.
Which webhook signatures can be verified?+
Providers that sign their webhooks, such as Stripe, GitHub, Typeform, Slack and Svix, have one-click presets. Any other sender is covered by a custom scheme: header, hash algorithm, encoding, timestamp tolerance and the signed payload format. See Verifying signed webhooks.
Does it accept form or XML bodies, not only JSON?+
Yes. Form-encoded, multipart and XML bodies are parsed into mappable fields, and an array in the body can be split into one workflow run per item. See Body formats and splitting arrays.
Can I change the payload before it reaches Shopify Flow?+
Yes. A transform function runs your own JavaScript on every request: reshape or enrich the payload, drop requests you do not want, or answer the caller directly so the webhook works as an API endpoint.

Bring external events into Shopify Flow

Install free and send your first Flow trigger in minutes.