Hi everyone,
I’m running into a critical issue where our app (Videoselz) is being bombarded with continuous products/update webhooks from a specific Shopify store.
The main problem is that this shop has never installed our app.
Our backend (we are using Gadget.dev) is correctly returning 404 Errors for these payloads because the shop doesn’t exist in our database. However, Shopify keeps attempting to deliver them at a very high frequency. The sheer volume of these incoming requests is generating massive log bloat and causing our server infrastructure bills to explode.
Here are the redacted webhook headers for context:
My questions:
-
Why would Shopify route webhooks to our app’s endpoint for a store that never authorized or installed it?
-
Is there a way to force-unsubscribe or block payloads from a specific Shop ID at the Shopify level so they stop hitting our servers and driving up costs?
Any guidance on how to sever this connection would be hugely appreciated!
That’s likely an orphaned subscription from an earlier install/uninstall, before you had app/uninstalled cleanup wired up. App scoped webhook subscriptions aren’t auto removed by Shopify on repeated failures, only shop scoped ones are, and you won’t have a valid token for that shop to delete it yourself. I’d open a Partner Support ticket with the shop domain and topic so they can force remove it on their end.
if you return 5xx errors, the webhook should automatically disable after multiple failures.
Worth noting it’s not just 5xx, Shopify’s docs say Admin API created subscriptions get deleted after 8 consecutive failures regardless of status code. App-config (declarative) webhooks don’t seem to follow that same rule though, which would explain why this keeps firing despite sustained 404s.
Thanks for flagging this. We understand your concern about the webhook volume and its impact on your infrastructure costs.
We shouldn’t draw conclusions about the shop’s installation status from its absence in your app’s database alone. To investigate why these deliveries are continuing, we’ll need to verify the affected shop’s app installation and webhook subscription state privately.
Please contact Shopify Support while signed in to your Partner account and include:
- A link to this thread
- Your app identifier
- The affected shop’s domain
- A recent webhook ID and its delivery timestamp, including the time zone
Please share those details only through the private support channel. Don’t post access tokens, customer data, account or shop IDs, or other sensitive information here.
