Shopify Developer Community Forums

Topic	Replies	Views	Activity
App security updates: IP allowlist is now required App Security On Oct 27 we recommended the IP allowlist. It is now required for every public app by November 20, or November 12 if you use bulk ops. An IP allowlist means a leaked token can’t be used anywhere but your own servers. Wit…	23	745	November 8, 2026
Bot orders attributed to our app via its public Storefront API token Dev Platform dev-stores	5	132	November 11, 2026
Coffee Observer: Web Bot Auth registration submitted, still 429 Shopify App Store partner-dash	0	8	November 11, 2026
Manage payouts, billing, and settings in Dev Dashboard Dev Platform dev-dashboard	7	167	November 11, 2026
Migrating from non expiring to expiring access tokens Authentication & Access oauth	218	7226	November 11, 2026
Shopify Sidekick App Recommendations – A Nightmare for Developers Outside the Top 3? Shopify App Store app-store	71	1434	November 11, 2026
Idea: Split script tags and theme into separate rows in Access and permissions table App Security	0	9	November 11, 2026
A rollouts request Uncategorized	0	13	November 11, 2026
Updates to App Store submission requirements: build, grow, then expand Shopify App Store app-store	22	253	November 11, 2026
When can GDPR webhooks contain only a customer email without a customer ID? Webhooks and Events access-scopes , troubleshooting	1	18	November 11, 2026
Feature Request: Expose cart-level custom attributes (and the order note) to post-purchase, `transactioncomplete` and receipt targets Extensions pos-extensions	2	47	November 11, 2026
How to link discountCodeBasicCreate to specific app page? GraphQL Admin API Troubleshooting general-gql-troubles	1	17	November 11, 2026
Shopify App Submission Blocked by “Submission Limited” Error Shopify App Store app-store	6	146	November 11, 2026
Customer Privacy API v0.2 Documentation Uncategorized	1	33	November 11, 2026
Github Integration and Shopify CLI Issue - Templates and Sections are not uploaded if there are any schema errors Shopify CLI and Libraries theme-commands	6	312	November 11, 2026
storefrontAccessTokenCreate returns ACCESS_DENIED after converting an app into a sales channel (channel_config) GraphQL Admin API Troubleshooting general-gql-troubles	0	12	November 11, 2026
Shopify App Pricing: The next generation of app billing Shopify App Store billing-api	55	4238	November 11, 2026
Shopify's new Changes Force us to retire after serving shopify for 9 years full-time Community Feedback	2	151	November 11, 2026
Registering Muse as a Shop Pay platform for UCP checkout (client_id, pay:wallet:read) Agentic Commerce	0	11	November 11, 2026
New App Uninstall Mandatory Reason Selection: Useless! Shopify App Store app-store	14	372	November 10, 2026
[iOS 11.2644.0] App Bridge Save Bar: embedded page stops receiving touches after Discard App Bridge app-bridge	1	22	November 10, 2026
[iOS / Android 11.x] Embedded app is not opened after install from Shopify Mobile since Oct 19 App Bridge app-bridge	1	24	November 10, 2026
Metaobject reference error Custom Data metaobjects	5	106	November 10, 2026
Draft Order line items not reflected in UI after changes Extensions admin-ui-extensions	24	822	November 10, 2026
App stuck in repeated review failures for 4 months - how can we break the cycle? Shopify App Store app-store	7	80	November 10, 2026
COD form rejected for bypassing checkout, is there a policy difference for existing apps? Shopify App Store app-store	3	35	November 10, 2026
Shopify payments attributable part Shopify App Store app-store , app-pricing	2	37	November 10, 2026
App Review Delays Shopify App Store app-store	3	51	November 10, 2026
App owned metaobject bug Custom Data metaobjects	7	331	November 10, 2026
Nov 20 could be the App Store’s second delisting wave in two months. Anyone else bracing for it? Shopify App Store app-store	9	161	November 10, 2026

App security updates: IP allowlist is now required

On Oct 27 we recommended the IP allowlist. It is now required for every public app by November 20, or November 12 if you use bulk ops. An IP allowlist means a leaked token can’t be used anywhere but your own servers. Wit…