List Locations
GET/api/shopify/:integrationInstance/locations
Returns the shop's locations. Note: this performs a live request to the Shopify Admin API on every call (it is not served from the local database), so responses reflect Shopify's current state and count against Shopify API limits.
This endpoint currently requires session authentication; Personal Access Token scope support is in progress.
Authentication: Requires Bearer token.
When Shopify refuses the request (for example the connection lost the read_locations permission), the endpoint returns 422 with Shopify's reason in message and an empty locations list with success: false — never an empty success. Reconnect the store, then retry.
Request
Responses
- 200
- 401
- 403
- 404
- 422
- 429
OK
Response Headers
Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.
Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.
Not found — no record with the given identifier (or the route does not exist). Verify the ID before retrying.
Unprocessable Entity
Response Headers
Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.