detektu
Shopify API changes
Info

Downgrade app access scopes from write to read

doc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/downgrade-app-access-scopes-from-write-to-read
Product
Shopify Admin GraphQL API
Source
Feed
Change kind
Feed Entry
Detected
Last updated

Deterministic evidence

Before / after

Extracted from Shopify's published contract. Open the source ↗

−1+81 change

1 / 1
null
{
"content_hash": "5b97d09631a700cec88d446cd8d70e1d3bd11065c907791e1f635ae3f80da9b9",
"excerpt": "Starting with Admin GraphQL API version 2027-01, apps that use Shopify-managed installation can call appDowngradeAccessScopes to replace optional write scopes with their matching read scopes. No action is required for existing apps. What changed The mutation affects only the calling app’s installation. Requested scopes must be declared in optional_scopes and must be write scopes with matching read scopes. Required scopes can’t be downgraded. Write scopes that aren’t currently granted are ignored…",
"identity": "https://shopify.dev/changelog/downgrade-app-access-scopes-from-write-to-read",
"link": "https://shopify.dev/changelog/downgrade-app-access-scopes-from-write-to-read",
"published_at": "2026-10-07T16:00:00Z",
"title": "Downgrade app access scopes from write to read"
}

Interpreted documentation change

What the vendor announced

The evidence describes a change: starting with Admin GraphQL API version 2027-01, apps with Shopify-managed installation can call appDowngradeAccessScopes to replace optional write scopes with their matching read scopes. It specifies that required scopes cannot be downgraded, and that the mutation affects only the calling app’s installation, with ignored write scopes that aren’t currently granted. No action is required for existing apps.

Downgrade app access scopes from write to read Starting with Admin GraphQL API version 2027-01, apps that use Shopify-managed installation can call appDowngradeAccessScopes to replace optional write scopes with their matching read scopes. No action is required for existing apps. What changed The mutation affects only the calling app’s installation. Requested scopes must be declared in optional_scopes and must be write scopes with matching read scopes. Required scopes can’t be downgraded. Write scopes that aren’t currently granted are ignored…

Deadline Jan 1, 2027Vendor source ↗

Monitored for you

Does this change affect your integration?

Choose the operations and fields your services use. Detektu matches Shopify findings to that declared usage so your team can review the relevant evidence. No agent or repository access required.

Monitor Shopify free See pricing

Multi-source correlation

Other Shopify findings correlated with this change across sources.

  1. Info
    SDK release 15.0.1sdk:npm/@shopify/shopify-api@15.0.1
    Shopify Admin GraphQL API
  2. Deprecation
    SDK version 13.0.0 yankedsdk:npm/@shopify/shopify-api@13.0.0
    Shopify Admin GraphQL API
  3. Info
    SDK release 15.0.1sdk:npm/@shopify/shopify-api@15.0.1
    Shopify Admin GraphQL API