Shopify · api · fg-0328

Customer email, phone or address comes back null with 'This app is not approved to access the Customer object'

This app is not approved to access the Customer object.

Verified 2026-10-15 · Confirmed by 0 builders · Trust 50/100

Cause

Customer data and personal fields like name, email, phone and address sit behind protected customer data access levels. Public apps must request them and pass review, and unapproved fields are redacted with a 200 response.

Fix

Choose a distribution method first, then request protected customer data access in the Partner Dashboard and select each field you use. Development store installs need the selection but not the review.

Apply

Partner Dashboard > Apps > your app > API access requests > Protected customer data access > Request access, then select Name, Email, Phone, Address as needed

Affects: Public apps on GraphQL Admin API, REST and webhooks; custom apps have level 1 and 2 by default

Sources

https://shopify.dev/docs/apps/launch/protected-customer-data

Have your agent know this before it fails

claude mcp add --transport http footgun https://getfootgun.com/api/mcp