Permissions required for unauthenticated GraphQL Storefront API calls

Hydrogen and Storefront APIs
1

Hi there,

I am seeing that for using the tokenless GraphQL Storefront API (Storefront API reference) some extra permissions approved by the merchant are required (Shopify API access scopes).

However, for cart stuff, considering that Shopify is encouraging us to use the Storefront API instead the classic Ajax Cart API, this is quite limiting, since to do that we should ask for new permissions to all our merchants.

Taking into account that the Ajax Cart API can be used with no permissions, would not it make sense to allow the storefront API to be used with no permissions at least for read-only cart requests? Please could you consider it?

2 Likes
2

Hey @sinuhe, try with version 2025-07. That should work without an access token.

The docs don’t make that very clear at the moment. :slight_smile: