Is it safe to give a new dropship supplier API access?

[Glojewl]

A new dropship supplier I would like to work with is requesting me to connect them with (Admin) API access. Due to the fact that I have never worked with them before, I do not yet know if they are trustworthy. Should I have any concerns giving them the access, and if yes, what should my concerns be?

Thank you!

[WinxDigital]

have they specified exactly what access they require, as Shopify has quite a robust level of API access across different areas covering read / write.

If  you can find out from them exactly what settings they want set within the access you should be able to tell if they need it all and gain more trust that way.

Read access is fine, write access means they can update info your side - as it is dropshipping related, if they are managing inventory and keeping your stock level updated, then they will need write access for inventory. Depending on fulfillment - again, they would need write access.

Again, it is just about getting them to confirm what settings they need. See if it stacks up and go with it.

[Glojewl]

Hi. Thanks for replying. Please see the attached of what exactly they are requesting access. Please let me know if I should have any concerns based off the access they are requesting. (Attached may be a bit blurry)

 

[WinxDigital]

thanks for posting the additional info,

from what they are asking for, it all makes sense to me as part of why they would need it as part of the dropshipping management. However I cannot tell you whether to trust them or not, that is for you to decide.

If it was me, I would allow it and monitor it. If anything seemed iffy, I would disable their access.

As long as you are not giving them access to modify staff accounts you will remain in control

[Glojewl]

Thank you for that information. 

I was under the impression, once access is given, you cannot undo. Also, with API in general, when access is given, where would the check out process happen. Would it be on my website or the website the access was given to?

Thank you!