List Access Scopes
GET/api/shopify/:integrationInstance/access-scopes
List the OAuth access scopes granted to this Shopify app installation, sorted alphabetically by handle. Sourced from the Shopify Admin GraphQL currentAppInstallation.accessScopes field.
Any valid API token can call this endpoint — no specific scope required. Manage tokens.
Authentication: Requires Bearer token.
Returns 500 when the underlying Shopify GraphQL call returns errors.
Request
Responses
- 200
- 401
- 403
- 404
- 429
- 500
OK
Response Headers
Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.
Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.
Not found — no record with the given identifier (or the route does not exist). Verify the ID before retrying.
Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.
Internal Server Error