Delegated Access Token Rate Limits

I have a question regarding the new delegated tokens feature:
https://shopify.dev/apps/auth/oauth/delegate-access-tokens
https://shopify.dev/api/admin-graphql/unstable/mutations/delegateAccessTokenCreate

For each delegated token, does it have a separate rate limit from the parent app token that was used to generate it, or must all delegated tokens share the same base rate limit as the top-level token/app?

There is nothing in the documentation about rate limiting behavior when using delegated tokens, and nothing in the rate limiting documentation.

We went ahead and did our own testing.

I can confirm the same rate limit is shared across all delegated tokens. Since the rate limit is shared, the only benefit of delegated tokens is to restrict the API scope/permission.

I hope this helps others who are wondering the same thing without having to create a POC.

1 Like