Skip to content

Shopify API Credentials & Scopes

Store domain, Admin GraphQL access tokens, and Webhook signing keys

Admin API Configuration

https://
Your unique myshopify myshopify.com admin address.
Custom app token requiring write_products and read_products scopes.
Used to compute HMAC-SHA256 digests and block unauthorized webhooks.

Required App Scopes

  • read_products
    Full GraphQL catalog queries
    Required
  • write_products
    productUpdate GraphQL mutation
    Required
  • read_inventory
    Variant inventory verification
    Optional