Authentication

Generate API keys in Settings → API in the Shopify app. Keys are shown once.

Headers

Use one of the following:

Authorization: Bearer <YOUR_API_KEY>

or

X-API-Key: <YOUR_API_KEY>

Security tips

• Rotate keys when sharing access with vendors.
• Never expose keys to untrusted clients without a backend proxy.
• Use server-side calls for sensitive operations.