Skip to main content
object

The permission required to access a Shopify Admin API or Storefront API resource for a shop. Merchants grant access scopes that are requested by applications.

String!
non-null

A description of the actions that the access scope allows an app to perform.

String!
non-null

A readable string that represents the access scope. The string usually follows the format {action}_{resource}. {action} is read or write, and {resource} is the resource that the action can be performed on. {action} and {resource} are separated by an underscore. For example, read_orders or write_products.


Was this section helpful?

mutation

Revokes previously granted access scopes from an app installation, allowing merchants to reduce an app's permissions without completely uninstalling it. This provides granular control over what data and functionality apps can access.

For example, if a merchant no longer wants an app to access customer information but still wants to use its inventory features, they can revoke the customer-related scopes while keeping inventory permissions active.

Use the appRevokeAccessScopes mutation to:

  • Remove specific permissions from installed apps
  • Maintain app functionality while minimizing data exposure

The mutation returns details about which scopes were successfully revoked and any errors that prevented certain permissions from being removed.

Learn more about managing app permissions.


Was this section helpful?