Hi - you don’t need need to include the shop domain to requests to the backend through url params like that as it’s not secure. The recommended approach is to use session tokens. Session tokens are automatically included when they make a fetch request to your app’s url. Specifically the shop domain is available as the dest property after decoding the session token (either using one of Shopify’s libraries or manually decoding with a JWT library).