New store (GraphQL) Invalid API key or access token

Technical Q&A
1

My first time setting up a new store since the REST API was discontinued. When I call GraphQL using my existing access token it works, but when I use the new one generated it doesn’t. Am I doing something wrong with this process:

  • Log into Shopify admin
  • Settings
  • Apps
  • “Build Apps in Dev Dashboard”
  • Opens https://dev.shopify.com/dashboard/[numbers]/apps
  • Click “Create App”
  • Give app name, click “Create”
  • Give scopes
  • Click “Release”
  • Click “Release” on “give version name” popup
  • On dev app page, click “Settings”
  • Under “Credentials”, “Secret” I copy the secret
  • Use that value in X-Shopify-Access-Token
  • Post to https://[storename].myshopify.com/admin/api/2026-04/graphql.json (using exact same Postman window, just replacing X-Shopify-Access-Token value

But instead of a success, I get 401 with response:

{

"errors": "\[API\] Invalid API key or access token (unrecognized login or wrong password)"

}

2

Hi @lkates

You’re using the app secret in the X-Shopify-Access-Token header. The secret is for app authentication, not Admin API requests.

Use the app’s Admin API access token instead. The access token is available after you release the app version. Double-check that you copied the access token, not the secret.

3

Also be aware that Shopify is now forcing expiring tokens, so getting the token once an using it forever is probably not possible.