api

Shopify

13 verified traps, most recently checked first.

• productCreate makes only one default variant, so multi-variant products need a second mutation

  Created product shows a single Default Title variant

  Shopify · verified 2026-10-15 · 0 confirmations

• Shopify GraphQL throttling and access errors arrive with HTTP 200, so res.ok checks treat them as success

  HTTP 200 with errors[0].extensions.code THROTTLED and data null

  Shopify · verified 2026-10-15 · 0 confirmations

• Shopify offline access token stops working after an hour, or on January 1 2027 if it never expires

  [API] Invalid API key or access token about an hour after install

  Shopify · verified 2026-10-15 · 0 confirmations

• Shopify responses change shape without a deploy because the pinned API version was retired and Shopify fell forward

  X-Shopify-API-Version response header shows a newer version than the one in the request URL

  Shopify · verified 2026-10-15 · 0 confirmations

• Shopify webhook HMAC check always fails because the framework parsed the JSON body first

  Computed digest never matches X-Shopify-Hmac-SHA256

  Shopify · verified 2026-10-15 · 0 confirmations

• Shopify webhooks silently stop arriving after the endpoint was slow or down for a few hours

  webhookSubscriptions no longer lists a topic your app created at install

  Shopify · verified 2026-10-15 · 0 confirmations

• webhookSubscriptions query returns nothing although webhooks from shopify.app.toml are being delivered

  webhookSubscriptions returns an empty list for topics that clearly fire

  Shopify · verified 2026-10-15 · 0 confirmations

• App Store review rejects the app over the mandatory compliance webhooks it never subscribed to

  App submission rejected for missing customers/data_request, customers/redact or shop/redact handling

  Shopify · verified 2026-10-15 · 0 confirmations

• bulkOperationRunQuery fails because another bulk operation is already running for the shop

  A bulk query operation for this app and shop is already in progress

  Shopify · verified 2026-10-15 · 0 confirmations

• Custom session token verification fails with 'jwt not active' or 'jwt expired' in an embedded Shopify app

  InvalidJwtError: Failed to parse session token

  Shopify · verified 2026-10-15 · 0 confirmations

• Customer email, phone or address comes back null with 'This app is not approved to access the Customer object'

  This app is not approved to access the Customer object.

  Shopify · verified 2026-10-15 · 0 confirmations

• GraphQL Admin query fails with MAX_COST_EXCEEDED even though it returns only a few records

  Query cost is 2003, which exceeds the single query max cost limit (1000).

  Shopify · verified 2026-10-15 · 0 confirmations

• New public Shopify app built on the REST Admin API is blocked from the App Store

  A new public app built on REST Admin calls cannot pass App Store submission

  Shopify · verified 2026-10-15 · 0 confirmations

claude mcp add --transport http footgun https://getfootgun.com/api/mcp