What is the most cost-effective way to host a Shopify custom app?

Topic summary

Focus: Hosting cost for a very simple Shopify checkout extension that only needs to query the Admin API, with concerns about paying $10–$20/month for hosting.

Key points:

  • One view: No separate hosting is needed for a pure checkout extension. Shopify hosts checkout extensions; deploy via Shopify CLI, and use the runtime’s built‑in fetch. Cited reason: the extension environment (remote‑ui) provides built‑in security. A documentation link was provided.
  • Counterpoint: Using API secrets on the client side is not allowed; Admin API calls should be server‑side to avoid credential exposure. The author reports a CORS error when attempting Admin API fetch from the extension and requests example code.

Considerations raised:

  • Security of Admin API credentials vs. convenience of client‑side fetch in the extension runtime.
  • Cost savings by avoiding separate hosting if feasible within the checkout extension environment.

Status:

  • No concrete code example provided yet, and the CORS/security concerns remain unresolved. The discussion is open, with a request for clarification and sample implementation.
Summarized with AI on December 14. AI used: gpt-5.

Hi everyone,

I’m building a custom app for a client, and all it really needs to do is query the Shopify Admin API from the checkout extension. It’s a very simple app with minimal requirements, but hosting it seems to cost $10-$20/month, which feels a bit excessive for something this basic.

I’m curious—are most of your custom apps as simple as mine (just querying the Admin API), or do they tend to have more complex requirements? Do you also feel that hosting costs for such simple apps are high?

Additionally, what factors do you consider when choosing a hosting service for your apps? Is it mainly about cost, performance, security, or something else entirely?

Looking forward to hearing your thoughts and suggestions!

Thanks in advance!

Hi @mehrshad ,

Checkout Extensions are hosted by Shopify.

Very simply create a private app in your clients shop and use those API key/secret in your Admin API calls.

Hi @AchieveApplabs ,

Thanks for your reply, As you know you are not allowed to use API secret on the frontend side and you need to deploy your app on a server.

Hi @mehrshad ,

You don’t need to make and host an app if all you’re making is a checkout extension. All you have to do is use Shopify CLI to deploy the extension to your clients shop. Then if you want to query Admin API you would use the built in fetch. Because it uses remote-ui security is a built in feature.

https://github.com/Shopify/ui-extensions/blob/unstable/documentation/runtime-environment.md

Good luck!

Hi @AchieveApplabs ,

Can you provide example code? I’m encountering a CORS error when trying to use fetch for the Admin API endpoint.

Additionally, using fetch directly to query the Admin API from the client side risks exposing your API secret, even if you’re running it on a separate worker. Admin API calls should be handled server-side to ensure security and prevent credential leaks.