I have reproduced the issue on the latest CLI version.
Yes, I am on the latest version
I have searched existing posts and this report is not a duplicate.
Yes, this isn’t a duplicate
In which of these areas are you experiencing a problem?
Other
Expected behavior
shopify theme list should return a list of themes.
Actual behavior
Authorization error
Reproduction steps
- login via CLI
- ‘shopify theme list’
- Error
Verbose output
2025-12-20T15:35:18.764Z: Running command theme list
2025-12-20T15:35:18.770Z: Running system process:
· Command: C:\Program Files\nodejs\node.exe C:\Users\memmons\AppData\Roaming\npm\node_modules\@shopify\cli\bin\run.js notifications list --ignore-errors
· Working directory: C:/Users/redacted
2025-12-20T15:35:18.775Z: Notifications to show: 0
2025-12-20T15:35:18.781Z: Ensuring that the user is authenticated with the Theme API with the following scopes:
[]
2025-12-20T15:35:18.781Z: Ensuring that the user is authenticated with the Admin API with the following scopes for the store redacted.myshopify.com:
[]
2025-12-20T15:35:18.781Z: Getting session store...
2025-12-20T15:35:18.782Z: Getting current session ID...
2025-12-20T15:35:18.782Z: Validating existing session against the scopes:
[
"openid",
"https://api.shopify.com/auth/shop.admin.graphql",
"https://api.shopify.com/auth/shop.admin.themes",
"https://api.shopify.com/auth/partners.collaborator-relationships.readonly",
"https://api.shopify.com/auth/shop.storefront-renderer.devtools",
"https://api.shopify.com/auth/partners.app.cli.access",
"https://api.shopify.com/auth/destinations.readonly",
"https://api.shopify.com/auth/organization.store-management",
"https://api.shopify.com/auth/organization.on-demand-user-access",
"https://api.shopify.com/auth/organization.apps.manage"
]
For applications:
{
"adminApi": {
"scopes": [],
"storeFqdn": "redacted.myshopify.com"
}
}
2025-12-20T15:35:18.782Z: Initiating the full authentication flow...
2025-12-20T15:35:18.782Z: Requesting device authorization code...
2025-12-20T15:35:18.783Z: Sending POST request to URL https://accounts.shopify.com/oauth/device_authorization
With request headers:
- Content-type: application/x-www-form-urlencoded
2025-12-20T15:35:19.041Z: Request to https://accounts.shopify.com/oauth/device_authorization completed in 258 ms
With response headers:
- cache-control: no-cache, no-store, private, must-revalidate, max-age=0
- content-type: application/json; charset=utf-8
- etag: W/"d62d53b0862a9043c03162356d723ae3"
- server-timing: processing;dur=64, socket_queue;dur=0.842, edge;dur=1.042, util;dur=0.05, cfRequestDuration;dur=155.999899
- x-request-id: 9eb78b16-898f-4c1a-88ad-f9294046931b-1766244919
2025-12-20T15:35:19.043Z: Received device authorization code: {
"verification_uri": "https://shopify.com/activate",
"verification_uri_complete": "https://accounts.shopify.com/activate-with-code?device_code%5Buser_code%5D=TDVG-ZRCH",
"expires_in": 599,
"interval": 5,
"device_code": "03994e11-4ce5-4daa-8ae2-2e985dcd548a",
"user_code": "TDVG-ZRCH"
}
To run this command, log in to Shopify.
User verification code: TDVG-ZRCH
👉 Press any key to open the login page on your browser
Opened link to start the auth process: https://accounts.shopify.com/activate-with-code?device_code%5Buser_code%5D=TDVG-ZRCH
2025-12-20T15:35:22.358Z: Starting polling for the identity token...
2025-12-20T15:35:27.365Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3
With request headers:
2025-12-20T15:35:27.589Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3 completed in 223 ms
With response headers:
- cache-control: no-cache, no-store, private, must-revalidate, max-age=0
- content-type: application/json; charset=utf-8
- server-timing: processing;dur=14, socket_queue;dur=1.064, edge;dur=3.043, util;dur=0.1, cfRequestDuration;dur=174.999952
- x-request-id: 805dc77d-75c6-47f3-b935-b7ab3f297242-1766244928
2025-12-20T15:35:27.589Z: Polling for device authorization... status: authorization_pending
2025-12-20T15:35:32.593Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3
With request headers:
2025-12-20T15:35:32.746Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3 completed in 153 ms
With response headers:
- cache-control: no-cache, no-store, private, must-revalidate, max-age=0
- content-type: application/json; charset=utf-8
- server-timing: processing;dur=17, socket_queue;dur=1.622, edge;dur=1.059, util;dur=0.05, cfRequestDuration;dur=119.999886
- x-request-id: 1fba5985-a564-4630-b5ef-d7bf55ec774c-1766244933
2025-12-20T15:35:32.746Z: Polling for device authorization... status: authorization_pending
2025-12-20T15:35:37.748Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3
With request headers:
2025-12-20T15:35:37.964Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3 completed in 216 ms
With response headers:
- cache-control: no-cache, no-store, private, must-revalidate, max-age=0
- content-type: application/json; charset=utf-8
- etag: W/"6d01913c2ee678495d382c35b723fd5d"
- server-timing: processing;dur=90, socket_queue;dur=1.654, edge;dur=1.04, util;dur=0.1, cfRequestDuration;dur=180.000067
- x-request-id: fcbddc9c-e449-4d80-861d-c473cf1a4939-1766244938
2025-12-20T15:35:37.965Z: CLI token received. Exchanging it for application tokens...
2025-12-20T15:35:37.966Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=271e16d403dfa18082ffb3d197bd2b5f4479c3fc32736d69296829cbb28d41a6&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fpartners.app.cli.access&subject_token=****
With request headers:
2025-12-20T15:35:37.966Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=ee139b3d-5861-4d45-b387-1bc3ada7811c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.storefront-renderer.devtools&subject_token=****
With request headers:
2025-12-20T15:35:37.966Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=32ff8ee5-82b8-4d93-9f8a-c6997cefb7dc&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fdestinations.readonly+https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.store-management+https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.on-demand-user-access&subject_token=****
With request headers:
2025-12-20T15:35:37.967Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.admin.graphql+https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.admin.themes+https%3A%2F%2Fapi.shopify.com%2Fauth%2Fpartners.collaborator-relationships.readonly&subject_token=****&destination=https%3A%2F%2Ffinding-foxtale.myshopify.com%2Fadmin&store=finding-foxtale.myshopify.com
With request headers:
2025-12-20T15:35:37.967Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.apps.manage&subject_token=****
With request headers:
2025-12-20T15:35:38.132Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.admin.graphql+https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.admin.themes+https%3A%2F%2Fapi.shopify.com%2Fauth%2Fpartners.collaborator-relationships.readonly&subject_token=****&destination=https%3A%2F%2Ffinding-foxtale.myshopify.com%2Fadmin&store=finding-foxtale.myshopify.com completed in 165 ms
With response headers:
- cache-control: no-cache, no-store, private, must-revalidate, max-age=0
- content-type: application/json; charset=utf-8
- server-timing: processing;dur=27, socket_queue;dur=0.823, edge;dur=2.024, util;dur=0.05, cfRequestDuration;dur=127.000093
- x-request-id: 8a83ccdf-93d7-4965-a22b-a1c6f5fb31f4-1766244938
╭─ error ──────────────────────────────────────────────────────────────────────╮
│ │
│ You are not authorized to use the CLI to develop in the provided store: │
│ redacted.myshopify.com │
│ │
│ Next steps │
│ • Ensure you have logged in to the store using the Shopify admin at │
│ least once. │
│ • Ensure you are the store owner, or have a staff account if you are │
│ attempting to log in to a dev store. │
│ • Ensure you are using the permanent store domain, not a vanity domain. │
│ │
╰──────────────────────────────────────────────────────────────────────────────╯
2025-12-20T15:35:38.168Z: Running system process:
· Command: npm prefix
· Working directory: C:/Users/redacted
2025-12-20T15:35:38.170Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=271e16d403dfa18082ffb3d197bd2b5f4479c3fc32736d69296829cbb28d41a6&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fpartners.app.cli.access&subject_token=**** completed in 203 ms
With response headers:
- cache-control: no-cache, no-store, private, must-revalidate, max-age=0
- content-type: application/json; charset=utf-8
- etag: W/"2de077fcf7458ebdff87fd67b6a32c6c"
- server-timing: processing;dur=47, socket_queue;dur=1.056, edge;dur=1.04, util;dur=0.15, cfRequestDuration;dur=144.000053
- x-request-id: 987c224a-07d8-420f-8e37-6ed5ba0d3e5e-1766244938
2025-12-20T15:35:38.171Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=ee139b3d-5861-4d45-b387-1bc3ada7811c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.storefront-renderer.devtools&subject_token=**** completed in 204 ms
With response headers:
- cache-control: no-cache, no-store, private, must-revalidate, max-age=0
- content-type: application/json; charset=utf-8
- etag: W/"9b31999cc88eb17a40ad632fbbaf083e"
- server-timing: processing;dur=55, socket_queue;dur=1.092, edge;dur=1.037, util;dur=0.1, cfRequestDuration;dur=153.000116
- x-request-id: 636c505f-7a1e-4063-a778-0c1328fd026b-1766244938
2025-12-20T15:35:38.172Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=32ff8ee5-82b8-4d93-9f8a-c6997cefb7dc&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fdestinations.readonly+https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.store-management+https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.on-demand-user-access&subject_token=**** completed in 205 ms
With response headers:
- cache-control: no-cache, no-store, private, must-revalidate, max-age=0
- content-type: application/json; charset=utf-8
- etag: W/"ba0f0e84a9288c36c00a2dd060e37c7b"
- server-timing: processing;dur=58, socket_queue;dur=1.174, edge;dur=1.038, util;dur=0.0, cfRequestDuration;dur=151.999950
- x-request-id: b43054f4-0629-4f7f-a689-c99142ef4692-1766244938
2025-12-20T15:35:38.218Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.apps.manage&subject_token=**** completed in 251 ms
With response headers:
- cache-control: no-cache, no-store, private, must-revalidate, max-age=0
- content-type: application/json; charset=utf-8
- etag: W/"65fe47b0eaef35885ca339bf7110f78a"
- server-timing: processing;dur=52, socket_queue;dur=1.719, edge;dur=1.032, util;dur=0.1, cfRequestDuration;dur=214.999914
- x-request-id: 7c8ed7a6-9276-4001-b428-e7f0f577f836-1766244938
2025-12-20T15:35:38.339Z: Obtaining the dependency manager in directory C:\Users\memmons...
2025-12-20T15:35:38.517Z: Getting current session ID...
2025-12-20T15:35:38.519Z: Getting current session ID...
2025-12-20T15:35:38.609Z: Request to https://monorail-edge.shopifysvc.com/v1/produce completed in 88 ms
With response headers:
- x-request-id: eacdee7b-2b45-4a2e-9606-a38ded72f4ac
2025-12-20T15:35:38.609Z: Analytics event sent: {
"command": "theme list",
"time_start": 1766244918765,
"time_end": 1766244938150,
"total_time": 19385,
"success": false,
"cli_version": "3.88.1",
"ruby_version": "",
"node_version": "24.12.0",
"is_employee": false,
"uname": "windows amd64",
"env_ci": false,
"env_plugin_installed_any_custom": false,
"env_plugin_installed_shopify": "[\"@shopify/cli\"]",
"env_shell": "cmd.exe",
"env_device_id": "e5cbaa33833d3c0b2d3323f20c5f900a78a0fe78",
"env_cloud": "localhost",
"env_package_manager": "unknown",
"env_is_global": false,
"env_auth_method": "none",
"env_is_wsl": false,
"env_build_repository": "Shopify/cli",
"cmd_app_warning_api_key_deprecation_displayed": false,
"cmd_all_timing_network_ms": 1102,
"cmd_all_timing_prompts_ms": 3234,
"cmd_all_launcher": "unknown",
"cmd_all_topic": "theme",
"cmd_all_plugin": "@shopify/theme",
"cmd_all_verbose": true,
"cmd_all_path_override": true,
"cmd_all_path_override_hash": "01e77cb135e184dec8b7bc27d0dc70221fa76ffc",
"cmd_all_timing_active_ms": 15047,
"cmd_all_exit": "expected_error",
"user_id": "unknown",
"request_ids": [],
"args": "-s redacted.myshopify.com --verbose",
"error_message": "You are not authorized to use the CLI to develop in the provided store: redacted.myshopify.com",
"env_plugin_installed_all": "[\"@shopify/cli\"]",
"env_shopify_variables": "{\"SHOPIFY_FLAG_STORE\":\"redacted.myshopify.com\"}",
"metadata": "{\"extraPublic\":{},\"extraSensitive\":{}}"
}
2025-12-20T15:35:38.615Z: Getting current session ID...
2025-12-20T15:35:38.616Z: Reporting handled error to Bugsnag: You are not authorized to use the CLI to develop in the provided store: redacted.myshopify.com
2025-12-20T15:35:38.629Z: Running system process:
· Command: npm prefix
· Working directory: C:/Users/memmons
2025-12-20T15:35:38.795Z: Obtaining the dependency manager in directory C:\Users\redacted...
2025-12-20T15:35:38.795Z: Getting current session ID...```
### Operating system
Windows 11
### CLI version
3.88.1
### Shell
PowerShell
### Nodejs version
v24.12.0
### What language and version are you using in your application?
N/A