Getting started with the GraphQL Admin and REST Admin APIs

The GraphQL Admin and REST Admin APIs let you build apps and other integrations for the Shopify admin using GraphQL or REST. With the APIs, you can create apps that offer functionality at every stage of a store’s operation, including shipping, fulfillment, and product management.

Authentication

The GraphQL Admin and REST Admin APIs require a Shopify access token (for public apps and custom apps) or an API password (for private apps) for making authenticated requests.

You can obtain an access token either by following the OAuth authorization process or by creating a private app and using that app’s API password.

Authenticate using OAuth

To get the access token, follow the OAuth authorization flow in the OAuth guide. Include the access token as a X-Shopify-Access-Token header in your requests.

Authenticate using basic HTTP authentication

  1. From your Shopify admin, click Apps.
  2. Click Manage private apps.
  3. Click Create a new private app.
  4. Enter the details for your private app.
  5. Click Save.
  6. Use the generated API password as the access token.

GraphQL Admin API

The GraphQL Admin API is a GraphQL-based alternative to the REST-based Admin API, and makes the functionality of the Shopify admin available at a single GraphQL endpoint:

POST [https://{shop}.myshopify.com/admin/api/2021-01/graphql.json](https://%7Bshop%7D.myshopify.com/admin/api/2021-01/graphql.json)

You can access the GraphQL Admin API using the GraphiQL app, curl, or any HTTP client:

Note

Shopify’s GraphQL APIs only accept POST requests. Other HTTP methods, such as GET or PUT, will return a 400 (Bad request) or 406 (Not acceptable) response.

Use the GraphiQL app

We recommend installing Shopify’s own GraphiQL app to explore your shop’s data using the GraphQL Admin API. After you’ve installed the app, you can test it by running the following query:

POST [https://{shop}.myshopify.com/admin/api/2021-01/graphql.json](https://%7Bshop%7D.myshopify.com/admin/api/2021-01/graphql.json)

Copy

  1. query {
  2.     shop {
  3.       name
  4.       primaryDomain {
  5.         url
  6.         host
  7.       }
  8.     }
  9.   }

View response

Use curl

The following example shows a query for the first 5 product IDs and handles. Replace {shop} with your store’s domain and {password} with the access token you generated in the Authentication section.

Note

If you are using an HTTP client, such as Postman or Insomnia, then you must set Content-Type to application/json instead of application/graphql.

POST [https://{shop}.myshopify.com/admin/api/2021-01/graphql.json](https://%7Bshop%7D.myshopify.com/admin/api/2021-01/graphql.json)

Copy

  1. curl -X POST \
  2.   https://{shop}.myshopify.com/admin/api/2021-01/graphql.json \
  3.   -H 'Content-Type: application/graphql' \
  4.   -H 'X-Shopify-Access-Token: {password}' \
  5.   -d '
  6.   {
  7.     products(first: 5) {
  8.       edges {
  9.         node {
  10.           id
  11.           handle
  12.         }
  13.       }
  14.       pageInfo {
  15.         hasNextPage
  16.       }
  17.     }
  18.   }
  19.   '

View response

Example query

In GraphQL, queries are the equivalent of REST’s GET action verb. They generally begin with one of the objects listed under [QueryRoot](https://shopify.dev/docs/admin-api/graphql/reference/common-objects/queryroot) and can get data from any connections that object has. Even though a POST is being sent to the GraphQL endpoint, if the body only contains queries, then data will only be retrieved and not modified.

The following example shows a query for the quantity of inventory items available at a location:

POST [https://{shop}.myshopify.com/admin/api/2021-01/graphql.json](https://%7Bshop%7D.myshopify.com/admin/api/2021-01/graphql.json)

Copy

  1. {
  2.     inventoryItem(id: "gid://shopify/InventoryItem/19848949301270") {
  3.       id
  4.       inventoryLevels(first: 10) {
  5.         edges {
  6.           node {
  7.             available
  8.           }
  9.         }
  10.       }
  11.     }
  12.   }

View response

Example mutation

Mutations are the equivalent of REST’s data-modifying action verbs, such as PUT or DELETE. The following example shows a mutation that increases the available inventory at a location:

POST [https://{shop}.myshopify.com/admin/api/2021-01/graphql.json](https://%7Bshop%7D.myshopify.com/admin/api/2021-01/graphql.json)

  1. mutation {
  2.     inventoryAdjustQuantity(
  3.       input:{
  4.         inventoryLevelId: "gid://shopify/InventoryLevel/13570506808?inventory_item_id=10820777115690"
  5.         availableDelta: 1
  6.       }
  7.     )
  8.     {
  9.       inventoryLevel {
  10.         available
  11.       }
  12.     }
  13.   }

View response

REST Admin API

You can access the REST Admin API using curl or any other HTTP client. REST Admin API endpoints are organized by resource. You’ll need to use different API endpoints depending on the service that your app provides.

Example GET request using curl

The following curl request retrieves information by using the Shop resource and the GET /admin/api/2021-01/shop.json endpoint. Replace {shop} with your store’s domain and {password} with the access token you generated in the Authentication section.

Request:

Copy

  1. curl -X GET \
  2.   https://{shop}.myshopify.com/admin/api/2021-01/shop.json \
  3.   -H 'Content-Type: application/json' \
  4.   -H 'X-Shopify-Access-Token: {password}'

View response

Example POST request

The following example illustrates how to create a product that has a draft status by using the Product resource and the POST /admin/api/2021-01/products.json endpoint.

Request:

POST [https://{shop}.myshopify.com/admin/api/2021-01/products.json](https://%7Bshop%7D.myshopify.com/admin/api/2021-01/products.json)

  1. {
  2.   "product": {
  3.     "title": "Burton Custom Freestyle 151",
  4.     "body_html": "<strong>Good snowboard!</strong>",
  5.     "vendor": "Burton",
  6.     "product_type": "Snowboard",
  7.     "status": "draft"
  8.   }
  9. }

View response

Example PUT request

The following example illustrates how to update the postal code of a customer address by using the Customer Address resource and the PUT /admin/api/2021-01/customers{customer_id}/addresses/{address_id}.json endpoint.

Request:

PUT /admin/api/2021-01/customers/207119551/addresses/207119551.json

Copy

  1. {
  2.   "address": {
  3.     "id": 207119551,
  4.     "zip": "90210"
  5.   }
  6. }

View response

Example DELETE request

The following example illustrates how to delete an order by using the Order resource and the DELETE /admin/api/2021-01/orders/{order_id}.json endpoint.

Request:

DELETE /admin/api/2021-01/orders/450789469.json

View response

Next steps