You are not authorized to use the CLI to develop in the provided store:

I have reproduced the issue on the latest CLI version.

Yes, I am on the latest version

I have searched existing posts and this report is not a duplicate.

Yes, this isn’t a duplicate

In which of these areas are you experiencing a problem?

Other

Expected behavior

shopify theme list should return a list of themes.

Actual behavior

Authorization error

Reproduction steps

  1. login via CLI
  2. ‘shopify theme list’
  3. Error

Verbose output

2025-12-20T15:35:18.764Z: Running command theme list
2025-12-20T15:35:18.770Z: Running system process:
  · Command: C:\Program Files\nodejs\node.exe C:\Users\memmons\AppData\Roaming\npm\node_modules\@shopify\cli\bin\run.js notifications list --ignore-errors
  · Working directory: C:/Users/redacted

2025-12-20T15:35:18.775Z: Notifications to show: 0
2025-12-20T15:35:18.781Z: Ensuring that the user is authenticated with the Theme API with the following scopes:
[]

2025-12-20T15:35:18.781Z: Ensuring that the user is authenticated with the Admin API with the following scopes for the store redacted.myshopify.com:
[]

2025-12-20T15:35:18.781Z: Getting session store...
2025-12-20T15:35:18.782Z: Getting current session ID...
2025-12-20T15:35:18.782Z: Validating existing session against the scopes:
[
  "openid",
  "https://api.shopify.com/auth/shop.admin.graphql",
  "https://api.shopify.com/auth/shop.admin.themes",
  "https://api.shopify.com/auth/partners.collaborator-relationships.readonly",
  "https://api.shopify.com/auth/shop.storefront-renderer.devtools",
  "https://api.shopify.com/auth/partners.app.cli.access",
  "https://api.shopify.com/auth/destinations.readonly",
  "https://api.shopify.com/auth/organization.store-management",
  "https://api.shopify.com/auth/organization.on-demand-user-access",
  "https://api.shopify.com/auth/organization.apps.manage"
]
For applications:
{
  "adminApi": {
    "scopes": [],
    "storeFqdn": "redacted.myshopify.com"
  }
}

2025-12-20T15:35:18.782Z: Initiating the full authentication flow...
2025-12-20T15:35:18.782Z: Requesting device authorization code...
2025-12-20T15:35:18.783Z: Sending POST request to URL https://accounts.shopify.com/oauth/device_authorization
With request headers:
 - Content-type: application/x-www-form-urlencoded

2025-12-20T15:35:19.041Z: Request to https://accounts.shopify.com/oauth/device_authorization completed in 258 ms
With response headers:
 - cache-control: no-cache, no-store, private, must-revalidate, max-age=0
 - content-type: application/json; charset=utf-8
 - etag: W/"d62d53b0862a9043c03162356d723ae3"
 - server-timing: processing;dur=64, socket_queue;dur=0.842, edge;dur=1.042, util;dur=0.05, cfRequestDuration;dur=155.999899
 - x-request-id: 9eb78b16-898f-4c1a-88ad-f9294046931b-1766244919

2025-12-20T15:35:19.043Z: Received device authorization code: {
  "verification_uri": "https://shopify.com/activate",
  "verification_uri_complete": "https://accounts.shopify.com/activate-with-code?device_code%5Buser_code%5D=TDVG-ZRCH",
  "expires_in": 599,
  "interval": 5,
  "device_code": "03994e11-4ce5-4daa-8ae2-2e985dcd548a",
  "user_code": "TDVG-ZRCH"
}

To run this command, log in to Shopify.
User verification code: TDVG-ZRCH
👉 Press any key to open the login page on your browser
Opened link to start the auth process: https://accounts.shopify.com/activate-with-code?device_code%5Buser_code%5D=TDVG-ZRCH
2025-12-20T15:35:22.358Z: Starting polling for the identity token...
2025-12-20T15:35:27.365Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3
With request headers:


2025-12-20T15:35:27.589Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3 completed in 223 ms
With response headers:
 - cache-control: no-cache, no-store, private, must-revalidate, max-age=0
 - content-type: application/json; charset=utf-8
 - server-timing: processing;dur=14, socket_queue;dur=1.064, edge;dur=3.043, util;dur=0.1, cfRequestDuration;dur=174.999952
 - x-request-id: 805dc77d-75c6-47f3-b935-b7ab3f297242-1766244928

2025-12-20T15:35:27.589Z: Polling for device authorization... status: authorization_pending
2025-12-20T15:35:32.593Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3
With request headers:


2025-12-20T15:35:32.746Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3 completed in 153 ms
With response headers:
 - cache-control: no-cache, no-store, private, must-revalidate, max-age=0
 - content-type: application/json; charset=utf-8
 - server-timing: processing;dur=17, socket_queue;dur=1.622, edge;dur=1.059, util;dur=0.05, cfRequestDuration;dur=119.999886
 - x-request-id: 1fba5985-a564-4630-b5ef-d7bf55ec774c-1766244933

2025-12-20T15:35:32.746Z: Polling for device authorization... status: authorization_pending
2025-12-20T15:35:37.748Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3
With request headers:


2025-12-20T15:35:37.964Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code&device_code=03994e11-4ce5-4daa-8ae2-2e985dcd548a&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3 completed in 216 ms
With response headers:
 - cache-control: no-cache, no-store, private, must-revalidate, max-age=0
 - content-type: application/json; charset=utf-8
 - etag: W/"6d01913c2ee678495d382c35b723fd5d"
 - server-timing: processing;dur=90, socket_queue;dur=1.654, edge;dur=1.04, util;dur=0.1, cfRequestDuration;dur=180.000067
 - x-request-id: fcbddc9c-e449-4d80-861d-c473cf1a4939-1766244938

2025-12-20T15:35:37.965Z: CLI token received. Exchanging it for application tokens...
2025-12-20T15:35:37.966Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=271e16d403dfa18082ffb3d197bd2b5f4479c3fc32736d69296829cbb28d41a6&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fpartners.app.cli.access&subject_token=****
With request headers:


2025-12-20T15:35:37.966Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=ee139b3d-5861-4d45-b387-1bc3ada7811c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.storefront-renderer.devtools&subject_token=****
With request headers:


2025-12-20T15:35:37.966Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=32ff8ee5-82b8-4d93-9f8a-c6997cefb7dc&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fdestinations.readonly+https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.store-management+https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.on-demand-user-access&subject_token=****
With request headers:


2025-12-20T15:35:37.967Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.admin.graphql+https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.admin.themes+https%3A%2F%2Fapi.shopify.com%2Fauth%2Fpartners.collaborator-relationships.readonly&subject_token=****&destination=https%3A%2F%2Ffinding-foxtale.myshopify.com%2Fadmin&store=finding-foxtale.myshopify.com
With request headers:


2025-12-20T15:35:37.967Z: Sending POST request to URL https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.apps.manage&subject_token=****
With request headers:


2025-12-20T15:35:38.132Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.admin.graphql+https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.admin.themes+https%3A%2F%2Fapi.shopify.com%2Fauth%2Fpartners.collaborator-relationships.readonly&subject_token=****&destination=https%3A%2F%2Ffinding-foxtale.myshopify.com%2Fadmin&store=finding-foxtale.myshopify.com completed in 165 ms
With response headers:
 - cache-control: no-cache, no-store, private, must-revalidate, max-age=0
 - content-type: application/json; charset=utf-8
 - server-timing: processing;dur=27, socket_queue;dur=0.823, edge;dur=2.024, util;dur=0.05, cfRequestDuration;dur=127.000093
 - x-request-id: 8a83ccdf-93d7-4965-a22b-a1c6f5fb31f4-1766244938

╭─ error ──────────────────────────────────────────────────────────────────────╮
│                                                                              │
│  You are not authorized to use the CLI to develop in the provided store:     │
│  redacted.myshopify.com                                               │
│                                                                              │
│  Next steps                                                                  │
│    • Ensure you have logged in to the store using the Shopify admin at       │
│      least once.                                                             │
│    • Ensure you are the store owner, or have a staff account if you are      │
│      attempting to log in to a dev store.                                    │
│    • Ensure you are using the permanent store domain, not a vanity domain.   │
│                                                                              │
╰──────────────────────────────────────────────────────────────────────────────╯

2025-12-20T15:35:38.168Z: Running system process:
  · Command: npm prefix
  · Working directory: C:/Users/redacted

2025-12-20T15:35:38.170Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=271e16d403dfa18082ffb3d197bd2b5f4479c3fc32736d69296829cbb28d41a6&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fpartners.app.cli.access&subject_token=**** completed in 203 ms
With response headers:
 - cache-control: no-cache, no-store, private, must-revalidate, max-age=0
 - content-type: application/json; charset=utf-8
 - etag: W/"2de077fcf7458ebdff87fd67b6a32c6c"
 - server-timing: processing;dur=47, socket_queue;dur=1.056, edge;dur=1.04, util;dur=0.15, cfRequestDuration;dur=144.000053
 - x-request-id: 987c224a-07d8-420f-8e37-6ed5ba0d3e5e-1766244938

2025-12-20T15:35:38.171Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=ee139b3d-5861-4d45-b387-1bc3ada7811c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fshop.storefront-renderer.devtools&subject_token=**** completed in 204 ms
With response headers:
 - cache-control: no-cache, no-store, private, must-revalidate, max-age=0
 - content-type: application/json; charset=utf-8
 - etag: W/"9b31999cc88eb17a40ad632fbbaf083e"
 - server-timing: processing;dur=55, socket_queue;dur=1.092, edge;dur=1.037, util;dur=0.1, cfRequestDuration;dur=153.000116
 - x-request-id: 636c505f-7a1e-4063-a778-0c1328fd026b-1766244938

2025-12-20T15:35:38.172Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=32ff8ee5-82b8-4d93-9f8a-c6997cefb7dc&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Fdestinations.readonly+https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.store-management+https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.on-demand-user-access&subject_token=**** completed in 205 ms
With response headers:
 - cache-control: no-cache, no-store, private, must-revalidate, max-age=0
 - content-type: application/json; charset=utf-8
 - etag: W/"ba0f0e84a9288c36c00a2dd060e37c7b"
 - server-timing: processing;dur=58, socket_queue;dur=1.174, edge;dur=1.038, util;dur=0.0, cfRequestDuration;dur=151.999950
 - x-request-id: b43054f4-0629-4f7f-a689-c99142ef4692-1766244938

2025-12-20T15:35:38.218Z: Request to https://accounts.shopify.com/oauth/token?grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&requested_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&subject_token_type=urn%3Aietf%3Aparams%3Aoauth%3Atoken-type%3Aaccess_token&client_id=fbdb2649-e327-4907-8f67-908d24cfd7e3&audience=7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c&scope=https%3A%2F%2Fapi.shopify.com%2Fauth%2Forganization.apps.manage&subject_token=**** completed in 251 ms
With response headers:
 - cache-control: no-cache, no-store, private, must-revalidate, max-age=0
 - content-type: application/json; charset=utf-8
 - etag: W/"65fe47b0eaef35885ca339bf7110f78a"
 - server-timing: processing;dur=52, socket_queue;dur=1.719, edge;dur=1.032, util;dur=0.1, cfRequestDuration;dur=214.999914
 - x-request-id: 7c8ed7a6-9276-4001-b428-e7f0f577f836-1766244938

2025-12-20T15:35:38.339Z: Obtaining the dependency manager in directory C:\Users\memmons...
2025-12-20T15:35:38.517Z: Getting current session ID...
2025-12-20T15:35:38.519Z: Getting current session ID...
2025-12-20T15:35:38.609Z: Request to https://monorail-edge.shopifysvc.com/v1/produce completed in 88 ms
With response headers:
 - x-request-id: eacdee7b-2b45-4a2e-9606-a38ded72f4ac

2025-12-20T15:35:38.609Z: Analytics event sent: {
  "command": "theme list",
  "time_start": 1766244918765,
  "time_end": 1766244938150,
  "total_time": 19385,
  "success": false,
  "cli_version": "3.88.1",
  "ruby_version": "",
  "node_version": "24.12.0",
  "is_employee": false,
  "uname": "windows amd64",
  "env_ci": false,
  "env_plugin_installed_any_custom": false,
  "env_plugin_installed_shopify": "[\"@shopify/cli\"]",
  "env_shell": "cmd.exe",
  "env_device_id": "e5cbaa33833d3c0b2d3323f20c5f900a78a0fe78",
  "env_cloud": "localhost",
  "env_package_manager": "unknown",
  "env_is_global": false,
  "env_auth_method": "none",
  "env_is_wsl": false,
  "env_build_repository": "Shopify/cli",
  "cmd_app_warning_api_key_deprecation_displayed": false,
  "cmd_all_timing_network_ms": 1102,
  "cmd_all_timing_prompts_ms": 3234,
  "cmd_all_launcher": "unknown",
  "cmd_all_topic": "theme",
  "cmd_all_plugin": "@shopify/theme",
  "cmd_all_verbose": true,
  "cmd_all_path_override": true,
  "cmd_all_path_override_hash": "01e77cb135e184dec8b7bc27d0dc70221fa76ffc",
  "cmd_all_timing_active_ms": 15047,
  "cmd_all_exit": "expected_error",
  "user_id": "unknown",
  "request_ids": [],
  "args": "-s redacted.myshopify.com --verbose",
  "error_message": "You are not authorized to use the CLI to develop in the provided store: redacted.myshopify.com",
  "env_plugin_installed_all": "[\"@shopify/cli\"]",
  "env_shopify_variables": "{\"SHOPIFY_FLAG_STORE\":\"redacted.myshopify.com\"}",
  "metadata": "{\"extraPublic\":{},\"extraSensitive\":{}}"
}
2025-12-20T15:35:38.615Z: Getting current session ID...
2025-12-20T15:35:38.616Z: Reporting handled error to Bugsnag: You are not authorized to use the CLI to develop in the provided store: redacted.myshopify.com
2025-12-20T15:35:38.629Z: Running system process:
  · Command: npm prefix
  · Working directory: C:/Users/memmons

2025-12-20T15:35:38.795Z: Obtaining the dependency manager in directory C:\Users\redacted...
2025-12-20T15:35:38.795Z: Getting current session ID...```

### Operating system
Windows 11

### CLI version
3.88.1

### Shell
PowerShell

### Nodejs version
v24.12.0

### What language and version are you using in your application?
N/A

Hi @Michael_Emmons - thanks for waiting! I appreciate you may have figured this out by now but thought I’d reply in case you haven’t and to forward resolve if this comes up for anyone else in the future.

This error usually comes down to which account type you’re authenticated with. The CLI has different auth paths depending on whether you’re logging in as a Partner (for collaborator access) vs directly as a store staff member or owner.

If you have a staff account on the store, try logging out and re-authenticating:

shopify auth logout
shopify theme list --store your-store.myshopify.com

When the browser opens, make sure you’re signing in with your store credentials. If you have both a Partner account and a store account with the same email, the CLI might be defaulting to the Partner flow - which would fail if you don’t have an active collaborator relationship with that store.

Alternatively, you can sidestep the whole auth dance by using a Theme Access password. Install the Theme Access app on your store, generate a password, and pass it directly:

shopify theme list --store your-store.myshopify.com --password shptka_xxxxx

Hope this gets you access if you haven’t got it already!