skills.rest
jacob-balslev
jacob-balslevCOMMUNITY
Explore all skills by this author →
GitHub

shopify

Implement Shopify webhook verification, OAuth, GraphQL throttling, and theme integration.

1|Updated May 6, 2026
Search Tags:#webhooks#shopify#metafields#online store 2.0#oauth scopes#hmac verification#graphql query cost
One-click install
npx skills add https://github.com/jacob-balslev/skill-graph --skill shopify-jacob-balslev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: shopify
Source: https://github.com/jacob-balslev/skill-graph/tree/main/marketplace/skills/shopify
Command: npx skills add https://github.com/jacob-balslev/skill-graph --skill shopify-jacob-balslev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you build reliable, Shopify-specific integrations by handling OAuth scopes, signed webhooks, GraphQL query-cost throttling, Online Store 2.0 theme structures, and Shopify data extensions like metafields and metaobjects.

Core Features & Use Cases

  • Webhook verification & reliability: Verify incoming Shopify webhooks using HMAC SHA-256 over the raw request body and enforce the five-second response requirement to prevent retries and subscription disablement.
  • API access with correct OAuth scopes: Implement Shopify Admin API authentication with an offline token and ensure requested scopes match the endpoints you actually call.
  • GraphQL query-cost aware execution: Read and respect GraphQL extensions.cost throttleStatus to pace requests and avoid throttling failures.
  • Online Store 2.0 theme integration: Model and implement theme changes using sections and blocks (JSON schemas, dynamic settings, and Liquid where applicable).
  • Metafields and metaobjects support: Represent custom data using namespace.key paths for metafields and typed records for metaobjects, fetched and queried via GraphQL.
  • App Proxy support: Route authenticated storefront paths through the merchant domain to your backend safely.

Quick Start

Verify an incoming Shopify webhook by computing the HMAC SHA-256 signature from the raw request body using your secret and comparing it to the X-Shopify-Hmac-Sha256 header, then ensure you respond with a 2xx within five seconds.

Frequently Asked Questions about shopify

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify Shopify webhooks using HMAC SHA-256?▼

To verify Shopify webhooks, compute the HMAC SHA-256 signature from the raw request body using your secret, then compare it to the X-Shopify-Hmac-Sha256 header using constant-time comparison to ensure authenticity.

What happens if my Shopify webhook handler takes longer than five seconds to respond?▼

If your Shopify webhook handler exceeds the five-second response deadline, Shopify will retry delivery and may eventually disable your webhook subscription. You must enforce this time limit to prevent retries and subscription disablement.

How do I avoid throttling failures when using the Shopify GraphQL Admin API?▼

To avoid Shopify GraphQL throttling failures, read and respect the extensions.cost throttleStatus in query responses. This allows you to pace requests according to GraphQL query-cost throttling rules and prevent rate limit errors.

Can I use Online Store 2.0 theme structures with custom sections and blocks?▼

Yes, you can model and implement Online Store 2.0 theme changes using sections and blocks. This involves defining JSON schemas, applying dynamic settings, and using Liquid where applicable for theme integration.

How do I represent custom data structures like metafields and metaobjects in Shopify?▼

You represent custom Shopify data using namespace.key paths for metafields and typed records for metaobjects. These custom data structures are fetched and queried via GraphQL to extend standard platform functionality.

Does Shopify app proxy support routing authenticated storefront paths to my backend?▼

Yes, Shopify app proxy support allows you to safely route authenticated storefront paths through the merchant domain directly to your backend, ensuring secure custom app integration.

Related Skills

Explore More Software Engineering Skills→
scalekit-incscalekit-inc
1

mcp-auth-fastmcp-scalekit

Protect FastMCP tools with OAuth 2.1 tokens and per-tool scopes.

Official
Advanced
MarbleSodasMarbleSodas

shopify

Execute Shopify Admin and Storefront GraphQL operations for store data retrieval and updates.

Community
Intermediate
tomtoto757tomtoto757
14

shopify-theme-development

Build Shopify Online Store 2.0 themes with Liquid templates and JSON sections.

Community
Intermediate
anotherbenanotherben
6

shopify-integration

Automate Shopify webhook verification, idempotency, pagination, and data synchronization.

Community
Advanced