Since the afternoon of May 20th, I no longer have access to metaobjects created by the official Forms application via the GraphQL API.
I tried searching by ID or Handle+Type, but the API returns a 200 with “data”: { “metaobject”: null }.
I should point out that I have granted access to the Admin API to read_metaobjects and I use …myshopify.com/admin/api/2024-10/graphql.json
Are other people affected?
Same observation here, checked it with multiple Shopify sites, all have the same issue.
My first thought it looks like an update somewhere, i.e. with regards to the security rights or permissions.
Didn’t find the root cause yet, I’m trying to check it with Shopify support.
OK Shopify just announced Summer 2025 edition and I think the problem is regarding : https://shopify.dev/docs/apps/build/custom-data/permissions but I still can’t find the issue
I guess this is the problem :
Metaobject wit type starting with “app–…” are App-owned namespaces and types and “Other apps cannot access these resources”
It’s a big change and I guess others apps will have big problems
Thanks for your update and investigation. Seems legit that they’ve changed something in the security/permission settings. Normally when I get an empty response it is mostly a permission issue. I think more organizations will have an issue with this change, but will take some time when everyone will notify it. I’ve put a ticket with Shopify support if they can do something about it/more information. For now I’m creating a workaround, I’m reading the mail from Flow with AI and then processing the data.
Any news regarding this problem ?
Jul 3, Liam-Shopify Shopify Staff
Hey @Keem - marking this as resolved so other devs can know that accessing metaobjects from Shopify Forms is no longer possible (Shopify Forms MetaObject Definitions - #5 by Keem - GraphQL Admin API Troubleshooting - Shopify Developer Community Forums)
There are peer to peer forums there is no support to be found here for stuff like this they’ve all but pulled stakes at this point, it’s a bot fest.
For feature requests for shopify-developed-apps merchants need to contact a support-advisor DIRECTLY.
IMO this is merchants data being made inaccessible, maybe because they just haven’t bothered to update the app but who knows.
Keep in mind shopify-apps are prone to not seeing changes for YEARS if ever.
So don’t sit around pining for a future that may never come.
a horrible kludge can be browser automations , RPA , to get the info from the admins UI.
For developers go to the actual developer forums waaaay better signal to noise ratio and often responses from actual shopify-developers.
Keep in mind getting access to OTHER apps data you DO NOT OWN is NOT isn’t an issue.
Yes it’s the merchant’s data, yet the merchant does not own the app.
So frame any requests/questions with that context in mind.
Don’t rely on the bare minimums shopifys-apps offer they are marketing-bullet points not full fledged solutions to rely on.
This doesn’t actually mean anything, granted what to what.
An app/tool having read_X is not the same as carte-blanche to access everything everywhere.
granting another app read_metaobjects isn’t carte-blanche to read other apps private data stores that would be a serious problem.
Asking for a way to allow that is likely to NEVER happen.
Frame all questions/requests with that type of security context in mind to avoid dead ends.
