Shop · Access

Capabilities

Who on your team can do what in Shop, and how the API and agent tools use the same rules.

Shop registers 29 user capabilities. Administrators have all of them; custom roles and per-user grants can hand out any of them (see Users and roles). The Shop API admits staff with one of an operation’s listed capabilities or shop:settings, and the same capabilities decide which agent tools an AI agent sees.

Capability	Label	Group	Granted by default to
`shop:settings`	Manage settings	Shop	administrators only
`shop:reports`	View reports	Shop	administrator, editor
`products:read`	View products	Products	administrator, editor
`products:create`	Create products	Products	administrator, editor
`products:update`	Edit products	Products	administrator, editor
`products:delete`	Delete products	Products	administrators only
`products:publish`	Publish products	Products	administrator, editor
`inventory:read`	View inventory	Inventory	administrator, editor
`inventory:adjust`	Adjust inventory	Inventory	administrators only
`orders:read`	View orders	Orders	administrator, editor
`orders:create`	Create orders	Orders	administrators only
`orders:update`	Update orders	Orders	administrator, editor
`payments:read`	View payments	Payments	administrator, editor
`payments:capture`	Capture payments	Payments	administrators only
`payments:refund`	Refund payments	Payments	administrators only
`subscriptions:read`	View subscriptions	Subscriptions	administrator, editor
`subscriptions:manage`	Manage subscriptions	Subscriptions	administrators only
`fulfillments:read`	View fulfillments	Fulfillments	administrators only
`fulfillments:manage`	Manage fulfillments	Fulfillments	administrators only
`returns:read`	View returns	Returns	administrators only
`returns:manage`	Manage returns	Returns	administrators only
`customers:read`	View customers	Customers	administrator, editor
`customers:manage`	Manage customers	Customers	administrators only
`discounts:read`	View discounts	Discounts	administrator, editor
`discounts:manage`	Manage discounts	Discounts	administrators only
`tax:read`	View tax settings	Tax	administrator, editor
`tax:manage`	Manage tax settings	Tax	administrators only
`shipping:read`	View shipping	Shipping	administrator, editor
`shipping:manage`	Manage shipping	Shipping	administrators only

Plugin permissions are a different thing: they limit what the Shop plugin itself may do on the host (admin:extend, network:outbound, mail:send, files:private, and so on). See Plugins.