Shopify · OAuth Scopes

Shopify OAuth Scopes

OAuth 2.0 searched

Shopify publishes 137 OAuth 2.0 scopes via the authorization_code and token_exchange flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Shopify API on a user’s behalf.

Tokens are issued from https://{store}.myshopify.com/admin/oauth/access_token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CommerceE-CommercePaymentsRetailShopping CartT1ShopifyAgentic CommerceUniversal Commerce ProtocolPoint-of-SaleCanada

Scopes: 137 Flows: authorization_code, token_exchange Method: searched

OAuth endpoints

Authorization URL
https://{store}.myshopify.com/admin/oauth/authorize

Token URL
https://{store}.myshopify.com/admin/oauth/access_token

Flows
authorization_codetoken_exchange

Scopes (137)

Scope	Description	Flows
read_all_orders
read_analytics_annotations
read_assigned_fulfillment_orders
read_cart_transforms
read_checkout_and_accounts_configurations
read_checkout_branding_settings
read_content
read_customer_events
read_customer_merge
read_customer_payment_methods
read_customers
read_delivery_customizations
read_discounts
read_draft_orders
read_files
read_fulfillments
read_gift_cards
read_inventory
read_inventory_shipments
read_inventory_shipments_received_items
read_inventory_transfers
read_legal_policies
read_locales
read_locations
read_marketing_events
read_marketplace_fulfillment_orders
read_markets
read_merchant_approval_signals
read_merchant_managed_fulfillment_orders
read_metaobject_definitions
read_metaobjects
read_online_store_navigation
read_online_store_pages
read_order_edits
read_orders
read_own_subscription_contracts
read_payment_customizations
read_payment_gateways
read_payment_mandate
read_payment_terms
read_price_rules
read_privacy_settings
read_products
read_purchase_options
read_reports
read_returns
read_script_tags
read_shipping
read_shopify_payments_dispute_evidences
read_shopify_payments_dispute_file_uploads
read_shopify_payments_disputes
read_shopify_payments_payouts
read_store_credit_account_transactions
read_store_credit_accounts
read_themes
read_third_party_fulfillment_orders
read_translations
read_users
read_validations
write_analytics_annotations
write_app_proxy
write_assigned_fulfillment_orders
write_cart_transforms
write_checkout_and_accounts_configurations
write_checkout_branding_settings
write_content
write_customer_merge
write_customers
write_delivery_customizations
write_discounts
write_draft_orders
write_files
write_fulfillments
write_gift_cards
write_inventory
write_inventory_shipments
write_inventory_shipments_received_items
write_inventory_transfers
write_locales
write_locations
write_marketing_events
write_markets
write_merchant_managed_fulfillment_orders
write_metaobject_definitions
write_metaobjects
write_online_store_navigation
write_order_edits
write_orders
write_own_subscription_contracts
write_payment_customizations
write_payment_gateways
write_payment_mandate
write_payment_sessions
write_payment_terms
write_pixels
write_price_rules
write_privacy_settings
write_products
write_purchase_options
write_reports
write_returns
write_script_tags
write_shipping
write_shopify_payments_dispute_evidences
write_shopify_payments_dispute_file_uploads
write_store_credit_account_transactions
write_themes
write_third_party_fulfillment_orders
write_translations
write_validations
unauthenticated_read_checkouts
unauthenticated_read_content
unauthenticated_read_customer_tags
unauthenticated_read_customers
unauthenticated_read_metaobjects
unauthenticated_read_product_inventory
unauthenticated_read_product_listings
unauthenticated_read_product_pickup_locations
unauthenticated_read_product_tags
unauthenticated_read_selling_plans
unauthenticated_write_checkouts
unauthenticated_write_customers
customer_read_companies
customer_read_customers
customer_read_draft_orders
customer_read_locations
customer_read_markets
customer_read_metaobjects
customer_read_orders
customer_read_own_subscription_contracts
customer_read_store_credit_accounts
customer_write_companies
customer_write_customers
customer_write_locations
customer_write_orders
customer_write_own_subscription_contracts
customer_write_subscription_contracts

📄 Provider scope reference: https://shopify.dev/docs/api/usage/access-scopes

Source

OAuth Scopes

generated: '2026-08-27'
method: searched
source: https://shopify.dev/docs/api/usage/access-scopes.md
docs: https://shopify.dev/docs/api/usage/access-scopes
provider: Shopify
providerId: shopify
note: Shopify OAuth 2.0 access scopes, read verbatim from the published access-scopes reference (markdown twin of the HTML page, fetched 2026-08-27, HTTP 200). Three disjoint scope families, one per API surface. The OAuth endpoints themselves are UNVERSIONED per https://shopify.dev/docs/api/usage/versioning.
flows:
- authorization_code
- token_exchange
authorization_url: https://{store}.myshopify.com/admin/oauth/authorize
token_url: https://{store}.myshopify.com/admin/oauth/access_token
families:
- name: Authenticated access scopes
  api: GraphQL Admin API / Admin REST API
  granularity: read_/write_ per resource
  note: Requested during app authorization. Some scopes (read_all_orders, read_customer_payment_methods, write_own_subscription_contracts, and the protected-customer-data tiers) require Shopify approval before they can be granted.
  count: 110
  scopes:
  - scope: read_all_orders
  - scope: read_analytics_annotations
  - scope: read_assigned_fulfillment_orders
  - scope: read_cart_transforms
  - scope: read_checkout_and_accounts_configurations
  - scope: read_checkout_branding_settings
  - scope: read_content
  - scope: read_customer_events
  - scope: read_customer_merge
  - scope: read_customer_payment_methods
  - scope: read_customers
  - scope: read_delivery_customizations
  - scope: read_discounts
  - scope: read_draft_orders
  - scope: read_files
  - scope: read_fulfillments
  - scope: read_gift_cards
  - scope: read_inventory
  - scope: read_inventory_shipments
  - scope: read_inventory_shipments_received_items
  - scope: read_inventory_transfers
  - scope: read_legal_policies
  - scope: read_locales
  - scope: read_locations
  - scope: read_marketing_events
  - scope: read_marketplace_fulfillment_orders
  - scope: read_markets
  - scope: read_merchant_approval_signals
  - scope: read_merchant_managed_fulfillment_orders
  - scope: read_metaobject_definitions
  - scope: read_metaobjects
  - scope: read_online_store_navigation
  - scope: read_online_store_pages
  - scope: read_order_edits
  - scope: read_orders
  - scope: read_own_subscription_contracts
  - scope: read_payment_customizations
  - scope: read_payment_gateways
  - scope: read_payment_mandate
  - scope: read_payment_terms
  - scope: read_price_rules
  - scope: read_privacy_settings
  - scope: read_products
  - scope: read_purchase_options
  - scope: read_reports
  - scope: read_returns
  - scope: read_script_tags
  - scope: read_shipping
  - scope: read_shopify_payments_dispute_evidences
  - scope: read_shopify_payments_dispute_file_uploads
  - scope: read_shopify_payments_disputes
  - scope: read_shopify_payments_payouts
  - scope: read_store_credit_account_transactions
  - scope: read_store_credit_accounts
  - scope: read_themes
  - scope: read_third_party_fulfillment_orders
  - scope: read_translations
  - scope: read_users
  - scope: read_validations
  - scope: write_analytics_annotations
  - scope: write_app_proxy
  - scope: write_assigned_fulfillment_orders
  - scope: write_cart_transforms
  - scope: write_checkout_and_accounts_configurations
  - scope: write_checkout_branding_settings
  - scope: write_content
  - scope: write_customer_merge
  - scope: write_customers
  - scope: write_delivery_customizations
  - scope: write_discounts
  - scope: write_draft_orders
  - scope: write_files
  - scope: write_fulfillments
  - scope: write_gift_cards
  - scope: write_inventory
  - scope: write_inventory_shipments
  - scope: write_inventory_shipments_received_items
  - scope: write_inventory_transfers
  - scope: write_locales
  - scope: write_locations
  - scope: write_marketing_events
  - scope: write_markets
  - scope: write_merchant_managed_fulfillment_orders
  - scope: write_metaobject_definitions
  - scope: write_metaobjects
  - scope: write_online_store_navigation
  - scope: write_order_edits
  - scope: write_orders
  - scope: write_own_subscription_contracts
  - scope: write_payment_customizations
  - scope: write_payment_gateways
  - scope: write_payment_mandate
  - scope: write_payment_sessions
  - scope: write_payment_terms
  - scope: write_pixels
  - scope: write_price_rules
  - scope: write_privacy_settings
  - scope: write_products
  - scope: write_purchase_options
  - scope: write_reports
  - scope: write_returns
  - scope: write_script_tags
  - scope: write_shipping
  - scope: write_shopify_payments_dispute_evidences
  - scope: write_shopify_payments_dispute_file_uploads
  - scope: write_store_credit_account_transactions
  - scope: write_themes
  - scope: write_third_party_fulfillment_orders
  - scope: write_translations
  - scope: write_validations
- name: Unauthenticated access scopes
  api: Storefront API
  granularity: unauthenticated_read_/unauthenticated_write_ per object
  note: Buyer-facing scopes for a public Storefront API access token. They grant access on behalf of a shopper, not a merchant.
  count: 12
  scopes:
  - scope: unauthenticated_read_checkouts
  - scope: unauthenticated_read_content
  - scope: unauthenticated_read_customer_tags
  - scope: unauthenticated_read_customers
  - scope: unauthenticated_read_metaobjects
  - scope: unauthenticated_read_product_inventory
  - scope: unauthenticated_read_product_listings
  - scope: unauthenticated_read_product_pickup_locations
  - scope: unauthenticated_read_product_tags
  - scope: unauthenticated_read_selling_plans
  - scope: unauthenticated_write_checkouts
  - scope: unauthenticated_write_customers
- name: Customer access scopes
  api: Customer Account API
  granularity: customer_read_/customer_write_ per object
  note: Scopes for data that belongs to an individual customer, obtained via the authorization code flow with PKCE. Level 2 protected customer data (PII) access must be requested from the Partner Dashboard.
  count: 15
  scopes:
  - scope: customer_read_companies
  - scope: customer_read_customers
  - scope: customer_read_draft_orders
  - scope: customer_read_locations
  - scope: customer_read_markets
  - scope: customer_read_metaobjects
  - scope: customer_read_orders
  - scope: customer_read_own_subscription_contracts
  - scope: customer_read_store_credit_accounts
  - scope: customer_write_companies
  - scope: customer_write_customers
  - scope: customer_write_locations
  - scope: customer_write_orders
  - scope: customer_write_own_subscription_contracts
  - scope: customer_write_subscription_contracts
scope_count: 137
checking_granted_scopes:
  method: appInstallation query on the GraphQL Admin API
  docs: https://shopify.dev/docs/api/admin-graphql/latest/queries/appInstallation
evidence:
- url: https://shopify.dev/docs/api/usage/access-scopes.md
  status: 200
  fetched: '2026-08-27'
scopes:
- scope: read_all_orders
  family: Authenticated access scopes
- scope: read_analytics_annotations
  family: Authenticated access scopes
- scope: read_assigned_fulfillment_orders
  family: Authenticated access scopes
- scope: read_cart_transforms
  family: Authenticated access scopes
- scope: read_checkout_and_accounts_configurations
  family: Authenticated access scopes
- scope: read_checkout_branding_settings
  family: Authenticated access scopes
- scope: read_content
  family: Authenticated access scopes
- scope: read_customer_events
  family: Authenticated access scopes
- scope: read_customer_merge
  family: Authenticated access scopes
- scope: read_customer_payment_methods
  family: Authenticated access scopes
- scope: read_customers
  family: Authenticated access scopes
- scope: read_delivery_customizations
  family: Authenticated access scopes
- scope: read_discounts
  family: Authenticated access scopes
- scope: read_draft_orders
  family: Authenticated access scopes
- scope: read_files
  family: Authenticated access scopes
- scope: read_fulfillments
  family: Authenticated access scopes
- scope: read_gift_cards
  family: Authenticated access scopes
- scope: read_inventory
  family: Authenticated access scopes
- scope: read_inventory_shipments
  family: Authenticated access scopes
- scope: read_inventory_shipments_received_items
  family: Authenticated access scopes
- scope: read_inventory_transfers
  family: Authenticated access scopes
- scope: read_legal_policies
  family: Authenticated access scopes
- scope: read_locales
  family: Authenticated access scopes
- scope: read_locations
  family: Authenticated access scopes
- scope: read_marketing_events
  family: Authenticated access scopes
- scope: read_marketplace_fulfillment_orders
  family: Authenticated access scopes
- scope: read_markets
  family: Authenticated access scopes
- scope: read_merchant_approval_signals
  family: Authenticated access scopes
- scope: read_merchant_managed_fulfillment_orders
  family: Authenticated access scopes
- scope: read_metaobject_definitions
  family: Authenticated access scopes
- scope: read_metaobjects
  family: Authenticated access scopes
- scope: read_online_store_navigation
  family: Authenticated access scopes
- scope: read_online_store_pages
  family: Authenticated access scopes
- scope: read_order_edits
  family: Authenticated access scopes
- scope: read_orders
  family: Authenticated access scopes
- scope: read_own_subscription_contracts
  family: Authenticated access scopes
- scope: read_payment_customizations
  family: Authenticated access scopes
- scope: read_payment_gateways
  family: Authenticated access scopes
- scope: read_payment_mandate
  family: Authenticated access scopes
- scope: read_payment_terms
  family: Authenticated access scopes
- scope: read_price_rules
  family: Authenticated access scopes
- scope: read_privacy_settings
  family: Authenticated access scopes
- scope: read_products
  family: Authenticated access scopes
- scope: read_purchase_options
  family: Authenticated access scopes
- scope: read_reports
  family: Authenticated access scopes
- scope: read_returns
  family: Authenticated access scopes
- scope: read_script_tags
  family: Authenticated access scopes
- scope: read_shipping
  family: Authenticated access scopes
- scope: read_shopify_payments_dispute_evidences
  family: Authenticated access scopes
- scope: read_shopify_payments_dispute_file_uploads
  family: Authenticated access scopes
- scope: read_shopify_payments_disputes
  family: Authenticated access scopes
- scope: read_shopify_payments_payouts
  family: Authenticated access scopes
- scope: read_store_credit_account_transactions
  family: Authenticated access scopes
- scope: read_store_credit_accounts
  family: Authenticated access scopes
- scope: read_themes
  family: Authenticated access scopes
- scope: read_third_party_fulfillment_orders
  family: Authenticated access scopes
- scope: read_translations
  family: Authenticated access scopes
- scope: read_users
  family: Authenticated access scopes
- scope: read_validations
  family: Authenticated access scopes
- scope: write_analytics_annotations
  family: Authenticated access scopes
- scope: write_app_proxy
  family: Authenticated access scopes
- scope: write_assigned_fulfillment_orders
  family: Authenticated access scopes
- scope: write_cart_transforms
  family: Authenticated access scopes
- scope: write_checkout_and_accounts_configurations
  family: Authenticated access scopes
- scope: write_checkout_branding_settings
  family: Authenticated access scopes
- scope: write_content
  family: Authenticated access scopes
- scope: write_customer_merge
  family: Authenticated access scopes
- scope: write_customers
  family: Authenticated access scopes
- scope: write_delivery_customizations
  family: Authenticated access scopes
- scope: write_discounts
  family: Authenticated access scopes
- scope: write_draft_orders
  family: Authenticated access scopes
- scope: write_files
  family: Authenticated access scopes
- scope: write_fulfillments
  family: Authenticated access scopes
- scope: write_gift_cards
  family: Authenticated access scopes
- scope: write_inventory
  family: Authenticated access scopes
- scope: write_inventory_shipments
  family: Authenticated access scopes
- scope: write_inventory_shipments_received_items
  family: Authenticated access scopes
- scope: write_inventory_transfers
  family: Authenticated access scopes
- scope: write_locales
  family: Authenticated access scopes
- scope: write_locations
  family: Authenticated access scopes
- scope: write_marketing_events
  family: Authenticated access scopes
- scope: write_markets
  family: Authenticated access scopes
- scope: write_merchant_managed_fulfillment_orders
  family: Authenticated access scopes
- scope: write_metaobject_definitions
  family: Authenticated access scopes
- scope: write_metaobjects
  family: Authenticated access scopes
- scope: write_online_store_navigation
  family: Authenticated access scopes
- scope: write_order_edits
  family: Authenticated access scopes
- scope: write_orders
  family: Authenticated access scopes
- scope: write_own_subscription_contracts
  family: Authenticated access scopes
- scope: write_payment_customizations
  family: Authenticated access scopes
- scope: write_payment_gateways
  family: Authenticated access scopes
- scope: write_payment_mandate
  family: Authenticated access scopes
- scope: write_payment_sessions
  family: Authenticated access scopes
- scope: write_payment_terms
  family: Authenticated access scopes
- scope: write_pixels
  family: Authenticated access scopes
- scope: write_price_rules
  family: Authenticated access scopes
- scope: write_privacy_settings
  family: Authenticated access scopes
- scope: write_products
  family: Authenticated access scopes
- scope: write_purchase_options
  family: Authenticated access scopes
- scope: write_reports
  family: Authenticated access scopes
- scope: write_returns
  family: Authenticated access scopes
- scope: write_script_tags
  family: Authenticated access scopes
- scope: write_shipping
  family: Authenticated access scopes
- scope: write_shopify_payments_dispute_evidences
  family: Authenticated access scopes
- scope: write_shopify_payments_dispute_file_uploads
  family: Authenticated access scopes
- scope: write_store_credit_account_transactions
  family: Authenticated access scopes
- scope: write_themes
  family: Authenticated access scopes
- scope: write_third_party_fulfillment_orders
  family: Authenticated access scopes
- scope: write_translations
  family: Authenticated access scopes
- scope: write_validations
  family: Authenticated access scopes
- scope: unauthenticated_read_checkouts
  family: Unauthenticated access scopes
- scope: unauthenticated_read_content
  family: Unauthenticated access scopes
- scope: unauthenticated_read_customer_tags
  family: Unauthenticated access scopes
- scope: unauthenticated_read_customers
  family: Unauthenticated access scopes
- scope: unauthenticated_read_metaobjects
  family: Unauthenticated access scopes
- scope: unauthenticated_read_product_inventory
  family: Unauthenticated access scopes
- scope: unauthenticated_read_product_listings
  family: Unauthenticated access scopes
- scope: unauthenticated_read_product_pickup_locations
  family: Unauthenticated access scopes
- scope: unauthenticated_read_product_tags
  family: Unauthenticated access scopes
- scope: unauthenticated_read_selling_plans
  family: Unauthenticated access scopes
- scope: unauthenticated_write_checkouts
  family: Unauthenticated access scopes
- scope: unauthenticated_write_customers
  family: Unauthenticated access scopes
- scope: customer_read_companies
  family: Customer access scopes
- scope: customer_read_customers
  family: Customer access scopes
- scope: customer_read_draft_orders
  family: Customer access scopes
- scope: customer_read_locations
  family: Customer access scopes
- scope: customer_read_markets
  family: Customer access scopes
- scope: customer_read_metaobjects
  family: Customer access scopes
- scope: customer_read_orders
  family: Customer access scopes
- scope: customer_read_own_subscription_contracts
  family: Customer access scopes
- scope: customer_read_store_credit_accounts
  family: Customer access scopes
- scope: customer_write_companies
  family: Customer access scopes
- scope: customer_write_customers
  family: Customer access scopes
- scope: customer_write_locations
  family: Customer access scopes
- scope: customer_write_orders
  family: Customer access scopes
- scope: customer_write_own_subscription_contracts
  family: Customer access scopes
- scope: customer_write_subscription_contracts
  family: Customer access scopes

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/shopify-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.