Hi everyone,
I’m trying to check deprecated API calls for my store, but I’m getting a “Not found” error with tokens generated from the new Dev Dashboard. The same endpoint works perfectly with tokens from legacy apps created in Store Admin > Settings > Apps and sales channels.
How I generated the token (OAuth flow via Dev Dashboard app):
Step 1 - Authorization Request: I redirected to Shopify’s authorization endpoint:
GET https://{shop}.myshopify.com/admin/oauth/authorize
?client_id=MY_API_KEY
&redirect_uri=https://myapp.com/callback
&state=random_nonce_123
&scope=read_products,write_products,read_orders
User approved the permissions.
Step 2 - Token Exchange: After receiving the authorization code in the callback, I exchanged it for the access token:
POST https://{shop}.myshopify.com/admin/oauth/access_token
Body:
{
"client_id": "MY_API_KEY",
"client_secret": "MY_API_SECRET",
"code": "AUTHORIZATION_CODE_FROM_CALLBACK"
}
Response received:
{
"access_token": "shpat_xxxxxxxxxxxxx",
"scope": "read_products,write_products,read_orders"
}
The token works - I can successfully call other endpoints like /admin/api/{version}/products.json and /admin/api/{version}/orders.json.
The problem:
When I call the deprecated API calls endpoint:
curl -X GET "https://my-store.myshopify.com/admin/api/{version}/deprecated_api_calls.json" \
-H "X-Shopify-Access-Token: shpat_xxxxxxxxxxxxx"
I receive:
{
"errors": "Not found"
}
However, if I use an access token from a legacy custom app (created in Store Admin > Settings > Apps and sales channels > Develop apps), the same endpoint works correctly and returns the deprecated API calls data.
Since legacy custom apps can no longer be created after January 1, 2026, this is becoming a problem for monitoring API deprecations going forward.
Questions:
-
Is
deprecated_api_calls.jsonnot supported for apps created via the Dev Dashboard? -
Are there additional scopes or permissions required for Dev Dashboard apps to access this endpoint?
-
Is there an alternative way to check deprecated API usage with the new authentication flow?
Thanks for any help!
