Hello Shopify Community,
I recently created and installed a custom app using the Shopify Developer tools (not from the App Store). The installation went through successfully, but I’m now stuck because I cannot find the configuration area in the Shopify Admin where the Admin API access token should be available.
What I’ve done so far:
• Created the app via Shopify CLI / Dev tools.
• Installed the app from the Develop apps section.
• I can see the app listed with versions, logs, and activity.
• However, I do not see the Configure button or any option to generate or view the API key / access token.
My Question:
Where exactly can I find or generate the Admin API access token for a custom app created via the developer tools?
Is there a different process compared to apps installed from the App Store?
Any guidance or step-by-step instructions would be greatly appreciated.
Thanks in advance!
Hi,
Yeah it’s kinda different than the way it was with those legacy apps.
Basically, you will need to follow the OAuth process by first making this GET request
GET https://{store}.myshopify.com/admin/oauth/authorize?client_id=API_KEY
&scope=comma,separated,scopes
&redirect_uri=REDIRECT_SITE_URL
&state=123
Then copy the code parameter from the URL Shopify redirects you to, and use it to make this POST request
POST https://{store}.myshopify.com/admin/oauth/access_token
Content-Type: application/json
Body:
{"client_id": "API_KEY","client_secret": "API_SECRET","code": "AUTHORIZATION_CODE"}
PS: for the redirect URL, make sure to use one with the same host as the App URL
I can confirm that this is correct, as all custom apps are no longer created via the Store’s Admin, and instead created and managed via the Dev Dashboard.
The access tokens are no longer available via the Admin or Dashboard diirectly, and you will need to use one of the existing authentication methods in order to receive the access token.
@Issa_Alsheikh_Hasan is correct in that this is one of the authentication methods you can use to generate an access token for a custom app, specifically they are describing the Authorization Code Grant method.
This way is a little bit more complex, and for custom apps specifically we do recommend using the client credentials grant method instead, as it’s much simpler, and I’ve described this further in the following existing forum thread: