AI agents for Salla and Zid stores: how to get your store ready

Your next customer may not open your store at all

Today a customer who wants to know where their order is opens your Salla or Zid store, signs in, finds the order and reads the status. Tomorrow they will ask their AI assistant: "Where is my order from that perfume store? And cancel the second one." The assistant does the rest.

This is agentic commerce: AI agents acting for people, doing the tasks people used to do by hand. For a store, it means a new kind of visitor. It doesn't look at your banners or your theme. It asks questions and requests actions, and it expects clear answers.

The question for every merchant is not whether this will happen. It is whether your store will be ready, and whether you will stay in control when it does.

What an AI agent wants from your store

Most of what customers ask a store's support team, an agent will ask too:

• Where is my order? Listing the customer's orders and reading one in detail.
• Do you have this in my size? Searching your products.
• Cancel it. Cancelling an order that hasn't shipped yet.
• I want to return it. Starting a return.

The first two are harmless: reading. The last two change things and can move money. That difference is the whole story of doing this safely.

The risk of letting agents in without a gateway

An agent can already try to use your store like a person: open the pages, fill the forms, even ask the customer for their password. That is the worst of both worlds:

• You don't know who is asking. Any script can say it is a trusted assistant.
• The customer's password ends up in the agent's hands. If the agent is compromised, so is the account.
• Nothing limits what it does. No rules, no limits, no approval from the customer.
• No record. When a customer says "I never asked for that", you have nothing to show.

How Allowfy connects to Salla and Zid

Allowfy is the secure front door for AI agents. It sits between the agents and your store and answers them in a standard way, through the Personal Agent Protocol.

Salla

You connect your Salla store with an access token, and Allowfy talks to the Salla API for you. The Allowfy app for the Salla App Store is on its way: you will install it from your Salla dashboard and link your store in one click, by signing in to Allowfy with the same email as your Salla account.

Zid

You connect your Zid store with the tokens from your Zid app (the authorization token and the manager token). Allowfy then reads your orders and sends cancellations and returns to Zid, under your rules.

What agents get

Once your store is connected, agents can:

• list a customer's orders and read one in detail;
• search your products (on Salla; product search on Zid is coming);
• ask to cancel an order;
• ask to return an order.

Your customers sign in with you, not with the agent

The agent never sees a password. When an assistant wants to act for a customer, the customer gets a one-time code by email, sent to the email of their account in your store. They enter it on your page, and the assistant is connected to their account and nothing else. The customer can disconnect it at any time.

Your rules decide everything

Every action has a rule, and anything without a rule is refused. When you connect a store, Allowfy offers a recommended starting set:

• Reading orders and products: allowed.
• Cancelling and returns: the customer approves the exact terms in their assistant.
• Above 500: the customer approves, then your team reviews before anything happens.

You can tighten them further. For example: no more than two returns per customer per week, counted across every assistant, so switching agents doesn't reset the count.

Safe by design

• Each action runs once. If the network fails halfway, Allowfy retries with the same key, and an outcome that stays unknown is held for your team. A return is never sent twice.
• A signed record of every step. Who asked, which rule decided, what the customer approved and what your store answered.
• An emergency stop. One switch halts every agent at once.
• Arabic and English. Summaries and pages appear in your customer's language.

Get ready in an afternoon

1. Create a free Allowfy account and start in test mode: everything runs end to end, and nothing real changes.
2. Connect your Salla or Zid store.
3. Keep the recommended rules, or adjust them.
4. Try it with a test agent, then go live.

Want to see where your site stands first? Allowfy Check tests any site for agent-readiness for free.