{"id":"mobeen-dev-chatbot-shopify","name":"chatbot_Shopify","homepage":"https://digilog.pk","repo_url":"https://github.com/Mobeen-Dev/chatbot_Shopify","category":"ai-ml","subcategories":[],"tags":["ai-ml","chatbot","shopify","fastapi","rag","faiss","elasticsearch","mcp","theme-extension","ecommerce","python"],"what_it_does":"A Shopify-integrated, AI-powered commerce chatbot that provides customer support and product discovery using hybrid retrieval (FAISS + Elasticsearch) and can perform agentic shopping actions (e.g., create/update cart and customer-related actions) through Shopify GraphQL APIs, with session persistence via Redis and chat history via MongoDB. Includes a Shopify Theme Extension for UI embedding and a FastAPI backend with Docker-based deployment. Mentions an MCP server in the architecture diagram but provides no MCP server endpoint or tooling details in the README.","use_cases":["Customer shopping assistant in a Shopify storefront (answer questions, recommend products)","Product discovery using semantic + lexical search","Assisted cart and checkout flows via agentic actions","FAQ/support with retrieval from product/order/customer data","Session-based conversational shopping experiences embedded in theme UI"],"not_for":["Highly regulated environments without additional security review and compliance controls","Use where outbound integration to external LLM/search systems is not allowed","Systems requiring strict guarantees of transactional idempotency for order/cart mutations without additional safeguards","Production use without verifying the missing details for MCP behavior and endpoint safety"],"best_when":null,"avoid_when":null,"alternatives":["Shopify Apps/Custom Apps using Shopify storefront APIs + a hosted chatbot service","RAG chatbots built with OpenAI + vector DB and Shopify GraphQL integration (without theme extension)","Commercial Shopify customer service/chat solutions (e.g., support/chat apps)","Building an MCP-based agent only after establishing a stable REST/OpenAPI interface first"],"af_score":40.2,"security_score":49.0,"reliability_score":23.8,"package_type":"mcp_server","discovery_source":["github"],"priority":"high","status":"evaluated","version_evaluated":null,"last_evaluated":"2026-03-30T15:31:34.521922+00:00","interface":{"has_rest_api":true,"has_graphql":true,"has_grpc":false,"has_mcp_server":false,"mcp_server_url":null,"has_sdk":false,"sdk_languages":[],"openapi_spec_url":null,"webhooks":false},"auth":{"methods":["Environment variables for OpenAI API key","Shopify API credentials via env vars (SHOPIFY_API_KEY, SHOPIFY_API_SECRET, SHOPIFY_STORE_URL)"],"oauth":false,"scopes":false,"notes":"No explicit auth mechanism for the provided REST endpoints is documented (e.g., API keys for /api/test-chat or /api/aync-chat), only that Shopify credentials exist for server-to-server calls."},"pricing":{"model":"OpenAI (unspecified model)","free_tier_exists":false,"free_tier_limits":null,"paid_tiers":[],"requires_credit_card":false,"estimated_workload_costs":null,"notes":"Pricing not described; costs depend on OpenAI usage and infrastructure (MongoDB/Redis/Elasticsearch/FAISS hosting)."},"requirements":{"requires_signup":false,"requires_credit_card":false,"domain_verification":false,"data_residency":[],"compliance":[],"min_contract":null},"agent_readiness":{"af_score":40.2,"security_score":49.0,"reliability_score":23.8,"mcp_server_quality":25.0,"documentation_accuracy":55.0,"error_message_quality":0.0,"error_message_notes":null,"auth_complexity":60.0,"rate_limit_clarity":10.0,"tls_enforcement":70.0,"auth_strength":40.0,"scope_granularity":20.0,"dependency_hygiene":40.0,"secret_handling":75.0,"security_notes":"README states API keys are stored in environment variables and mentions CORS configured for trusted domains, role-based access control for admin endpoints, input validation/sanitization, and secure session management with Redis. However, it does not document transport security requirements for the public endpoints, authorization/authentication requirements for /api endpoints, scope granularity for Shopify permissions, or any detailed secret-handling/logging guarantees. Dependency/version and CVE posture are not verifiable from the provided content.","uptime_documented":0.0,"version_stability":40.0,"breaking_changes_history":30.0,"error_recovery":25.0,"idempotency_support":"false","idempotency_notes":null,"pagination_style":"none","retry_guidance_documented":false,"known_agent_gotchas":["MCP is referenced only in a diagram/architecture description; no MCP server URL or tool contract is provided in the README, so agent integration may be incomplete.","Agentic actions that mutate cart/customer/order state may require idempotency controls and safe retry logic; README does not document such guarantees.","Endpoint naming includes a likely typo (/api/aync-chat), which may cause integration errors if implementations differ from docs."]}}