Hi @Dylan and everyone, I’m trying to use the following mutation to create a Storefront Access Token via the Shopify Admin API: mutation storeFrontAccessTokenCreate($input: StorefrontAccessTokenInput!) { storefrontAccessTokenCreate(input: $input) { storefrontAccessToken { id acce…

Big thank you to @KyleG-Shopify and @Dylan for your continued support and clear guidance throughout this troubleshooting journey! :folded_hands: Your insights around: Enabling Storefront API in the Partner Dashboard Ensuring the correct unauthenticated access scopes Using direct_api_mode = "offli…

Please see this relevant discussion that answers this question: [image] Which Storefront API access scope can mutate cart attributes? Hydrogen and Storefront APIs Exactly @Dylan - you’re on point, basically any one of those unaunthenticated… scopes should work. Personall…

Just to add to this as well, I recently had some frustrations with that mutation. The issue I ran in to is I hadn’t enabled the storefront API access in the partner dashboard, so that’s another thing to check :slight_smile:

Hi @KyleG-Shopify Appreciate the heads-up! Could you please specify where exactly in the Partner Dashboard the Storefront API access needs to be enabled?

It’s in the app configuration for custom apps. [02-16-5i1j1-tjr60]

Hi @KyleG-Shopify , Thanks so much for your help — I really value your input. Just wondering, is it possible to access the Storefront API section from the public app?

For a public app, adding the scopes to your TOML should be sufficient.

Hi @Kyleg-Shopify Thank you for the heads-up. I’m currently using the following scopes in my public app, but I’m still unable to get checkout access: read_all_orders,read_cart_transforms,read_content,read_customer_events,read_customer_merge,read_customers,read_delivery_customizations,read_discoun…

For the storefront API, that uses the unauthenticated access scopes, which I’m not seeing in that list: https://shopify.dev/docs/api/usage/access-scopes#unauthenticated-access-scopes Can you clarify what you’re needing with checkout access? The reason I ask is to make sure you’re not looking to acc…

Hi @KyleG-Shopify , Thank you for the clarification, and I apologize for the confusion regarding the access scopes. You’re absolutely right—I mistakenly listed only the authenticated Admin API scopes and overlooked the unauthenticated access scopes required for the Storefront API. "read_all_cart_tr…

Thanks for sharing that. Are you using managed installations for your app? If so, try adding the following direct api fields to your app configuration and then deploy: [api] direct_api_mode = "offline" embedded_app_direct_api_access = true And then test using an external API client postman to ensu…

What permission is required to use storefrontAccessTokenCreate mutation in Shopify Admin API?

GraphQL Admin API Troubleshooting

Dylan April 30, 2025, 1:40pm 2

Please see this relevant discussion that answers this question:

Topic		Replies	Views
Access denied for storefrontAccessTokenCreate field GraphQL Admin API Troubleshooting general-gql-troubles	5	199	April 3, 2026
Storefront Access Token Creation Issue #2073 GraphQL Admin API Troubleshooting general-gql-troubles	5	434	May 8, 2025
Permissions for creating an Storefront Access Token? Hydrogen and Storefront APIs storefront-api	2	247	April 30, 2025
storefrontAccessTokenCreate Access Denied GraphQL Admin API Troubleshooting general-gql-troubles	12	1386	September 24, 2025
How to use Storefront API in public app without Sales Channel approval? Hydrogen and Storefront APIs storefront-api	2	179	July 22, 2025

What permission is required to use storefrontAccessTokenCreate mutation in Shopify Admin API?

Related topics