App reviews, troubleshooting, and recommendations
I'm trying to create a `storefrontAccessToken` using the GraphQL API. Out of frustration, I have granted all unauthenticated access scopes, but it's still not working—I keep getting "access denied." What access scopes are required to create a `storefrontAccessToken`?
My app is currently public in draft state and it's not a sales channel. These Access scopes have been granted -
read_metaobject_definitions,read_metaobjects,read_products,unauthenticated_read_checkouts,unauthenticated_read_content,unauthenticated_read_customer_tags,unauthenticated_read_customers,unauthenticated_read_metaobjects,unauthenticated_read_product_listings,unauthenticated_read_product_tags,unauthenticated_write_checkouts,unauthenticated_write_customers,write_metaobject_definitions,write_metaobjects
This is what i'm trying
It seems like the storefrontAccessTokenCreate mutation simply doesn't work in the GraphiQL interface shown in the screenshot. You have to make the request for a token from a real GraphQL client in your app code, or just make the GraphQL request with curl or Invoke-WebRequest on the command line.
Encountered the same problem. It does work when using the graphql client on the server side, but on the playground the mutation fails.
Learn how to build powerful custom workflows in Shopify Flow with expert guidance from ...
By Jacqui May 7, 2025Did You Know? May is named after Maia, the Roman goddess of growth and flourishing! ...
By JasonH May 2, 2025Discover opportunities to improve SEO with new guidance available from Shopify’s growth...
By Jacqui May 1, 2025