We’re currently receiving a huge amount of these errors with the graphql API:
statusCode: 423
message: Locked
What’s happening?
Found that it’s affecting only a single store.
I contacted the support. Here’s their answer:
Here’s a quick recap of what we found today.
The errors your app is seeing on SHOP_NAME_REDACTED are caused by a shop-level lock on that store, blocking all API access. No active Shopify incident matches this, so the lock is tied to that store’s account specifically.
Next step: the merchant needs to contact Shopify Support so we can investigate and lift the lock. Once they do, it should be resolved quickly.
There was a db outage earlier that apparently got their store in this locked state.
Useful to have that confirmed. Worth handling 423 separately from 401 and 403 in your retry logic, since it’s a shop-level lock rather than a token or scope problem.
An app that treats it like an uninstall and deactivates the shop record can miss the reconnect once the lock is lifted, so backing off and retrying tends to be safer than tearing down state.