# Private Shopify API APP in Python

**URL:** <https://community.shopify.com/t/private-shopify-api-app-in-python/354031>\
**Category:** Shopify Apps\
**Tags:** third-party-apps\
**Created:** [September 1, 2024, 11:15am UTC](https://community.shopify.com/t/private-shopify-api-app-in-python/354031 "2024-09-01T11:15:02Z")\
**Posts on this page:** 1\
**Page:** 1

## AI-generated summary

A developer is asking whether there's an issue with their approach to using Shopify's private API in Python. Instead of following the official documentation's recommended method, they're using the `requests` library directly with the API key and password in the URL format:

`https://{api_key}:{password}@{shopname}.myshopify.com/admin/api/2024-01/orders.json`

The official approach involves:
- Setting up the Shopify session with `shopify.ShopifyResource.set_site(shop_url)` for private apps
- Using ActiveResource instances to interact with the API (e.g., `shopify.Product.find()`)
- Leveraging built-in methods for CRUD operations

The question centers on whether their direct HTTP requests approach differs functionally from the documented SDK method, and if there are any problems or disadvantages to their implementation. The discussion remains open with no responses yet addressing the validity or potential issues of this alternative approach.

<div class="post-metadata">

**Author:** ![andreb](https://avatars.discourse-cdn.com/v4/letter/a/2acd7d/32.png) [@andreb](https://community.shopify.com/u/andreb)\
**Post date:** [September 1, 2024, 11:15am UTC](https://community.shopify.com/t/private-shopify-api-app-in-python/354031/1 "2024-09-01T11:15:02Z")

</div>

Hello guys,

is there a problem, when I didn’t use the Shopify Api like this:

1. First create a new application in either the partners admin or your store admin. For a private App you’ll need the API\_KEY and the PASSWORD otherwise you’ll need the API\_KEY and SHARED\_SECRET.

2. For a private App you just need to set the base site url as follows:

3. Now you’re ready to make authorized API requests to your shop! Data is returned as ActiveResource instances:

like they write it in the doc?

Now I use the API KEY with requests, like this:

api\_endpoint = [email removed]  
response = requests.get(api\_endpoint)

Is there a problem? Where is the difference?