Shopify

Shopify Access API

Manage access scopes and tokens

Documentation GitHub OpenAPI

Operations 19

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /admin/oauth/access_scopes.json See which access scopes my token has · Shopify Retrieve access scopes for the access token #

Ask an LLM

“Which permissions has the merchant actually granted my app's access token?”

“Can I confirm my token carries a specific scope before calling endpoints that need it?”

Tell an agent

List the access scopes on my current access token.

Show me every OAuth scope this app installation was granted.

POST /admin/api/2020-01/storefront_access_tokens.json Issue a Storefront access token (API 2020-01) · Shopify Creates A New Storefront Access Token #

Ask an LLM

“How can I generate a new Storefront API token through the 2020-01 Admin API?”

“Can version 2020-01 mint an extra storefront access token for a headless storefront?”

Tell an agent

Create a new storefront access token with API version 2020-01.

Issue one more Storefront API token via 2020-01.

GET /admin/api/2020-01/storefront_access_tokens.json List Storefront access tokens (API 2020-01) · Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued #

Ask an LLM

“Which Storefront API tokens has my app issued, according to the 2020-01 Admin API?”

“Can I see all existing storefront access tokens with version 2020-01?”

Tell an agent

List the storefront access tokens issued so far using 2020-01.

Show my app's Storefront API tokens on version 2020-01.

DELETE /admin/api/2020-01/storefront_access_tokens/{storefront_access_token_id}.json Revoke a Storefront access token (API 2020-01) · Shopify Deletes An Existing Storefront Access Token #

Ask an LLM

“How can I revoke a leaked Storefront API token on the 2020-01 Admin API?”

“Does deleting a storefront access token on 2020-01 cut off storefronts still using it?”

Tell an agent destructive · confirm first

Delete storefront access token {storefront_access_token_id} using 2020-01.

Revoke Storefront API token {storefront_access_token_id} on version 2020-01.

POST /admin/api/2020-04/storefront_access_tokens.json Issue a Storefront access token (API 2020-04) · Shopify Creates A New Storefront Access Token #

Ask an LLM

“What's the 2020-04 call for creating a Storefront API access token?”

“Is it possible to add a fresh storefront token for a new sales channel on 2020-04?”

Tell an agent

Generate a storefront access token through the 2020-04 Admin API.

On 2020-04, mint a new token for the Storefront API.

GET /admin/api/2020-04/storefront_access_tokens.json List Storefront access tokens (API 2020-04) · Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued #

Ask an LLM

“What storefront access tokens exist for my app on API version 2020-04?”

“Is there a 2020-04 call that lists every Storefront API token I've created?”

Tell an agent

Retrieve all storefront access tokens from the 2020-04 Admin API.

On 2020-04, show the Storefront API tokens my app holds.

DELETE /admin/api/2020-04/storefront_access_tokens/{storefront_access_token_id}.json Revoke a Storefront access token (API 2020-04) · Shopify Deletes An Existing Storefront Access Token #

Ask an LLM

“What's the 2020-04 way to remove a storefront access token I no longer use?”

“Is revoking a Storefront API token on 2020-04 permanent?”

Tell an agent destructive · confirm first

Remove storefront access token {storefront_access_token_id} from the 2020-04 Admin API.

On 2020-04, revoke the Storefront API token {storefront_access_token_id}.

POST /admin/api/2020-07/storefront_access_tokens.json Issue a Storefront access token (API 2020-07) · Shopify Creates A New Storefront Access Token #

Ask an LLM

“Using the 2020-07 release, can my app create its own Storefront API token?”

“Does 2020-07 support issuing additional storefront access tokens?”

Tell an agent

Create a Storefront API token via the 2020-07 release.

Add a fresh storefront access token through 2020-07.

GET /admin/api/2020-07/storefront_access_tokens.json List Storefront access tokens (API 2020-07) · Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued #

Ask an LLM

“Using the 2020-07 release, which Storefront API tokens are active for my app?”

“Does 2020-07 let me enumerate issued storefront access tokens?”

Tell an agent

Fetch the list of storefront access tokens via 2020-07.

Enumerate my app's Storefront API tokens on the 2020-07 release.

DELETE /admin/api/2020-07/storefront_access_tokens/{storefront_access_token_id}.json Revoke a Storefront access token (API 2020-07) · Shopify Deletes An Existing Storefront Access Token #

Ask an LLM

“Using the 2020-07 release, can I invalidate one storefront access token?”

“Does 2020-07 support deleting Storefront API tokens by ID?”

Tell an agent destructive · confirm first

Invalidate storefront access token {storefront_access_token_id} via 2020-07.

Delete the 2020-07 Storefront API token with ID {storefront_access_token_id}.

POST /admin/api/2020-10/storefront_access_tokens.json Issue a Storefront access token (current 2020-10) · Shopify Creates A New Storefront Access Token #

Ask an LLM

“Which call creates a Storefront API token on the current 2020-10 version?”

“Can the non-deprecated API issue a new storefront access token for my custom storefront?”

Tell an agent

Create a storefront access token with the non-deprecated 2020-10 API.

Using 2020-10, issue a new Storefront API token for my app.

GET /admin/api/2020-10/storefront_access_tokens.json List Storefront access tokens (current 2020-10) · Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued #

Ask an LLM

“Which Storefront API tokens exist for my app on the current 2020-10 version?”

“Can I list issued storefront access tokens with the non-deprecated API?”

Tell an agent

List storefront access tokens with the non-deprecated 2020-10 API.

Using 2020-10, show every Storefront API token I've issued.

DELETE /admin/api/2020-10/storefront_access_tokens/{storefront_access_token_id}.json Revoke a Storefront access token (current 2020-10) · Shopify Deletes An Existing Storefront Access Token #

Ask an LLM

“On the current 2020-10 version, what permanently cuts off a storefront token I've stopped using?”

“Can I delete a compromised storefront access token using the non-deprecated API?”

Tell an agent destructive · confirm first

Delete storefront access token {storefront_access_token_id} with the non-deprecated 2020-10 API.

Using 2020-10, revoke Storefront API token {storefront_access_token_id}.

POST /admin/api/2021-01/storefront_access_tokens.json Issue a Storefront access token (API 2021-01) · Shopify Creates A New Storefront Access Token #

Ask an LLM

“Can I still create a Storefront API token on the deprecated 2021-01 version?”

“What does the 2021-01 token creation call hand back?”

Tell an agent

Issue a storefront access token through API version 2021-01.

Mint a Storefront API token via 2021-01.

GET /admin/api/2021-01/storefront_access_tokens.json List Storefront access tokens (API 2021-01) · Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued #

Ask an LLM

“Can I still list storefront access tokens on the deprecated 2021-01 version?”

“What does the 2021-01 storefront token list return?”

Tell an agent

Return all storefront access tokens from API version 2021-01.

Show issued Storefront API tokens via 2021-01.

DELETE /admin/api/2021-01/storefront_access_tokens/{storefront_access_token_id}.json Revoke a Storefront access token (API 2021-01) · Shopify Deletes An Existing Storefront Access Token #

Ask an LLM

“Can I still revoke a storefront access token on the deprecated 2021-01 version?”

“What happens when I delete a Storefront API token through 2021-01?”

Tell an agent destructive · confirm first

Revoke storefront access token {storefront_access_token_id} through API version 2021-01.

Remove Storefront API token {storefront_access_token_id} via 2021-01.

POST /admin/api/unstable/storefront_access_tokens.json Issue a Storefront access token (unstable API) · Shopify Creates A New Storefront Access Token #

Ask an LLM

“How can I create a Storefront API token against the unstable Admin API?”

“Is issuing storefront access tokens supported in the unstable version?”

Tell an agent

Create a storefront access token on the unstable version.

Issue an unstable-version Storefront API token.

GET /admin/api/unstable/storefront_access_tokens.json List Storefront access tokens (unstable API) · Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued #

Ask an LLM

“How can I list storefront access tokens on the unstable Admin API?”

“Is listing Storefront API tokens available in the unstable version?”

Tell an agent

List storefront access tokens on the unstable version.

Show the unstable-version list of Storefront API tokens.

DELETE /admin/api/unstable/storefront_access_tokens/{storefront_access_token_id}.json Revoke a Storefront access token (unstable API) · Shopify Deletes An Existing Storefront Access Token #

Ask an LLM

“How can I revoke a storefront access token on the unstable Admin API?”

“Is deleting Storefront API tokens supported in the unstable version?”

Tell an agent destructive · confirm first

Delete storefront access token {storefront_access_token_id} on the unstable version.

Revoke the unstable-version Storefront API token {storefront_access_token_id}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/shopify-access-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Shopify Access API
  x-refined-note:
  - x-date differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Access across 2 of this provider''s published API definitions: shopify-admin-rest-api-openapi.yml, shopify-api-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://{store}.myshopify.com/admin/api/2025-01
  description: Shopify Admin REST API
  variables:
    store:
      default: my-store
      description: The Shopify store subdomain
tags:
- name: Access
  description: Manage access scopes and tokens
paths:
  /admin/oauth/access_scopes.json:
    get:
      operationId: listAccessScopes
      summary: Shopify Retrieve access scopes for the access token
      description: Retrieves a list of access scopes associated with the current access token.
      tags:
      - Access
      responses:
        '200':
          description: A list of access scopes
          content:
            application/json:
              schema:
                type: object
                properties:
                  access_scopes:
                    type: array
                    items:
                      type: object
                      properties:
                        handle:
                          type: string
                          description: The scope handle
      security:
      - AccessToken: []
    servers:
    - url: https://{store}.myshopify.com/admin/api/2025-01
      description: Shopify Admin REST API
      variables:
        store:
          default: my-store
          description: The Shopify store subdomain
  /admin/api/2020-01/storefront_access_tokens.json:
    post:
      requestBody:
        content:
          application/json:
            schema: {}
            examples:
              example1:
                value:
                  storefront_access_token:
                    title: Test
                summary: Create a new storefront access token
              example2:
                value:
                  storefront_access_token:
                    title: Test
                summary: Generating a token for an app that lacks required unauthenticated scopes fails
              example3:
                value:
                  storefront_access_token:
                    title: Token
                summary: Creating a token after exceeding the limit fails
      summary: Shopify Creates A New Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#create-2020-01
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202001_create_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
    get:
      summary: Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#index-2020-01
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202001_get_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/2020-01/storefront_access_tokens/{storefront_access_token_id}.json:
    delete:
      summary: Shopify Deletes An Existing Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#destroy-2020-01
      parameters:
      - in: path
        name: storefront_access_token_id
        required: true
        schema:
          type: string
        description: storefront_access_token_id
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202001_delete_storefront_access_tokens_param_storefront_access_token_id
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/2020-04/storefront_access_tokens.json:
    post:
      requestBody:
        content:
          application/json:
            schema: {}
            examples:
              example1:
                value:
                  storefront_access_token:
                    title: Test
                summary: Create a new storefront access token
              example2:
                value:
                  storefront_access_token:
                    title: Test
                summary: Generating a token for an app that lacks required unauthenticated scopes fails
              example3:
                value:
                  storefront_access_token:
                    title: Token
                summary: Creating a token after exceeding the limit fails
      summary: Shopify Creates A New Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#create-2020-04
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202004_create_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
    get:
      summary: Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#index-2020-04
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202004_get_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/2020-04/storefront_access_tokens/{storefront_access_token_id}.json:
    delete:
      summary: Shopify Deletes An Existing Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#destroy-2020-04
      parameters:
      - in: path
        name: storefront_access_token_id
        required: true
        schema:
          type: string
        description: storefront_access_token_id
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202004_delete_storefront_access_tokens_param_storefront_access_token_id
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/2020-07/storefront_access_tokens.json:
    post:
      requestBody:
        content:
          application/json:
            schema: {}
            examples:
              example1:
                value:
                  storefront_access_token:
                    title: Test
                summary: Create a new storefront access token
              example2:
                value:
                  storefront_access_token:
                    title: Test
                summary: Generating a token for an app that lacks required unauthenticated scopes fails
              example3:
                value:
                  storefront_access_token:
                    title: Token
                summary: Creating a token after exceeding the limit fails
      summary: Shopify Creates A New Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#create-2020-07
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202007_create_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
    get:
      summary: Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#index-2020-07
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202007_get_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/2020-07/storefront_access_tokens/{storefront_access_token_id}.json:
    delete:
      summary: Shopify Deletes An Existing Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#destroy-2020-07
      parameters:
      - in: path
        name: storefront_access_token_id
        required: true
        schema:
          type: string
        description: storefront_access_token_id
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202007_delete_storefront_access_tokens_param_storefront_access_token_id
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/2020-10/storefront_access_tokens.json:
    post:
      requestBody:
        content:
          application/json:
            schema: {}
            examples:
              example1:
                value:
                  storefront_access_token:
                    title: Test
                summary: Create a new storefront access token
              example2:
                value:
                  storefront_access_token:
                    title: Test
                summary: Generating a token for an app that lacks required unauthenticated scopes fails
              example3:
                value:
                  storefront_access_token:
                    title: Token
                summary: Creating a token after exceeding the limit fails
      summary: Shopify Creates A New Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#create-2020-10
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: create_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
    get:
      summary: Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#index-2020-10
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: get_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/2020-10/storefront_access_tokens/{storefront_access_token_id}.json:
    delete:
      summary: Shopify Deletes An Existing Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#destroy-2020-10
      parameters:
      - in: path
        name: storefront_access_token_id
        required: true
        schema:
          type: string
        description: storefront_access_token_id
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: delete_storefront_access_tokens_param_storefront_access_token_id
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/2021-01/storefront_access_tokens.json:
    post:
      requestBody:
        content:
          application/json:
            schema: {}
            examples:
              example1:
                value:
                  storefront_access_token:
                    title: Test
                summary: Create a new storefront access token
              example2:
                value:
                  storefront_access_token:
                    title: Test
                summary: Generating a token for an app that lacks required unauthenticated scopes fails
              example3:
                value:
                  storefront_access_token:
                    title: Token
                summary: Creating a token after exceeding the limit fails
      summary: Shopify Creates A New Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#create-2021-01
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202101_create_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
    get:
      summary: Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#index-2021-01
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202101_get_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/2021-01/storefront_access_tokens/{storefront_access_token_id}.json:
    delete:
      summary: Shopify Deletes An Existing Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#destroy-2021-01
      parameters:
      - in: path
        name: storefront_access_token_id
        required: true
        schema:
          type: string
        description: storefront_access_token_id
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_202101_delete_storefront_access_tokens_param_storefront_access_token_id
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/unstable/storefront_access_tokens.json:
    post:
      requestBody:
        content:
          application/json:
            schema: {}
            examples:
              example1:
                value:
                  storefront_access_token:
                    title: Test
                summary: Create a new storefront access token
              example2:
                value:
                  storefront_access_token:
                    title: Test
                summary: Generating a token for an app that lacks required unauthenticated scopes fails
              example3:
                value:
                  storefront_access_token:
                    title: Token
                summary: Creating a token after exceeding the limit fails
      summary: Shopify Creates A New Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#create-unstable
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_unstable_create_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
    get:
      summary: Shopify Retrieves A List Of Storefront Access Tokens That Have Been Issued
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#index-unstable
      parameters: []
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_unstable_get_storefront_access_tokens
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
  /admin/api/unstable/storefront_access_tokens/{storefront_access_token_id}.json:
    delete:
      summary: Shopify Deletes An Existing Storefront Access Token
      description: https://shopify.dev/docs/admin-api/rest/reference/access/storefrontaccesstoken#destroy-unstable
      parameters:
      - in: path
        name: storefront_access_token_id
        required: true
        schema:
          type: string
        description: storefront_access_token_id
      tags:
      - Access
      responses:
        '200':
          description: ''
      operationId: deprecated_unstable_delete_storefront_access_tokens_param_storefront_access_token_id
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
components:
  securitySchemes:
    AccessToken:
      type: apiKey
      name: X-Shopify-Access-Token
      in: header
      description: Access token obtained via OAuth
x-refined-from:
- shopify-admin-rest-api-openapi.yml
- shopify-api-openapi.yml

Shopify Access API

Operations 19

Documentation

Specifications

Schemas & Data

Other Resources

Work with this as data

MCP server

Tools for apis

Call it yourself

Get an API key

OpenAPI Specification