POS ui extension - Direct API - url must be secure (https)

Extensions
1

Hi,

I tried the new Direct API access in a POS UI extension (using the shopify POS mobile app).

I use fetch that way:

await fetch('shopify:admin/api/graphql.json', {
  method: 'POST',
  body: JSON.stringify({
    query: `
      query GetProduct($id: ID!) {
        product(id: $id) {
          title
        }
      }
    `,
    variables: {id: 'gid://shopify/Product/1234567890'},
  }),
});

but regardless of what I do I get the error URL must be secure (HTTPS).

I found similar issue mentioned here: Unable to Fetch with Direct API Access – “shopify:” URL Scheme Not Supported

In shopify.app.toml I tried

[access.admin]
direct_api_mode = "online"
embedded_app_direct_api_access = true

and in shopify.extension.toml

api_version = "2025-07"

[[extensions]]
type = "ui_extension"
# ...name, handle, description...

[extensions.capabilities]
direct_api = true

[[extensions.targeting]]
# ...

But even after re-deploying, restarting the POS mobile app, and the extension, the error persists.

Any idea?

2

Works when I use api_version = "unstable" instead of api_version = "2025-07"