We're enhancing the security of order status URLs by replacing static keys with purpose-specific capability tokens. This change helps protect customer data while giving you more control over URL access patterns. Order status URLs now use dynamically generated capability tokens instead of static key parameters.
Summary extracted from the official source text. Verify details on the source page.
| Platform | Shopify |
|---|---|
| Effective date | No date published |
| Precision | n/a |
| Published | 2025-04-22 |
| Categories | Breaking / action requiredAPI version sunsetPolicy |
| Tags | API, Action Required, Admin GraphQL API, Update |
| Official source | Shopify developer changelog ↗ |
| Fetched | 2026-10-17T03:44:00+00:00 |
| First seen | 2026-10-17T01:05:46+00:00 |
| Status | Listed by the source |
| Stable ID | shopify-3d777bd215 · JSON |