Skip to content

Platform

Know who can do what, and who did what

Give the buyer, the packer and the accountant exactly the access their job needs, and keep a record of every change to the team, API keys, webhooks, stores and plan.

Settings · Team, and the audit logIllustration · sample data

Team

  • Alex MorganInstalled the appOwner
  • Priya ShahShopify staffPlanner
  • Sam LeeShopify staffWarehouse
  • Jo ParkShopify staff · newViewer

Audit log

  • team.role_changedAlex Morgan set Sam Lee: Viewer → Warehouse
  • api_key.createdAlex Morgan created “BI export” (expires in 365 days)
  • webhook.createdPriya Shah added hooks.example.com
  • billing.plan_selectedAlex Morgan chose Inventory + Pick + Pack (annual)

An illustration of the screen, drawn with sample figures.

Specification

How roles, staff logins & audit log works

At a glance

Stokrio has five roles (Owner, Admin, Planner, Warehouse and Viewer), each with a defined set of permissions that the server checks on every request. On Shopify, each staff member who opens the app gets their own login as a Viewer and the store owner assigns roles; Shopify decides who can open the app at all. An organisation always keeps at least one Owner, API keys expire (a year by default, two at most), and an audit log records team changes, API keys, webhooks, connected stores and plan changes with who made them and when.

01
Five roles
Owner and Admin run everything; Planners buy and plan; Warehouse staff receive, adjust and pack; Viewers read. Financial reports need financial access.
02
Shopify staff, one login each
People never share the owner's login. New staff start as Viewers until the owner gives them a role.
03
Always an owner
The last owner can't be removed or demoted, even if two people change roles at the same moment.
04
Keys that expire
New API keys expire after a year by default (two at most), each organisation can hold 25, and keys can never manage users or settings.
05
An audit log
Role changes, removals, invitations, API keys, webhooks, connected stores and plan changes, with who and when. Readable by owners and admins through the API.
06
Reports go only to people who may see them
Scheduled report emails are re-checked at every send, so removing or demoting someone stops them.

Frequently asked questions

Can I invite teammates by email on Shopify?
Not needed: staff join automatically when they open Stokrio from the Shopify admin, and the owner sets their role. Email invitations stay available for workspaces that aren't billed through Shopify.
Where do I see the audit log?
Through the API today (GET /api/v1/audit-log, for owners and admins). A page inside the app is planned.
Does removing someone in Stokrio remove their Shopify access?
No. Shopify controls who can open the app. Removing someone in Stokrio takes away their role, but they return as a Viewer the next time they open it; remove them in Shopify to end their access.

Screenshots use illustrative demo data, not customer results.

Shopify App · 3PL Partner API · US$39/mo entry plan

See Stokrio with your own data

Install Stokrio from Shopify and your products and orders flow in. Running a 3PL? Start with the demo.