API Explorer

The connected Shopify view includes an API Explorer for running live requests against your store. It is a segmented workspace with three surfaces, plus a separate Webhooks tab.

The explorer targets Shopify API version 2025-10. It opens inset in the settings panel and can be expanded to fullscreen.

---

Admin GraphQL

Query and mutate store data with the Admin GraphQL API, authenticated with your Admin access token (sent as the X-Shopify-Access-Token header on Lyna's servers).

The Admin GraphQL surface is a full GraphiQL workspace:

• Editor with autocomplete, plus variables and headers panels.
• Schema and Docs explorer to browse every type and field in the Admin API.
• History and tabs that persist across sessions.
• Query cost in the response extensions (requested cost, actual cost, and throttle status), so you can see how each query draws on Shopify's rate limit.
• Send to AI, which drops the last query and response into chat so Lyna can explain it or wire it into your app.

---

Admin REST

Read and write store resources with the Admin REST API, authenticated with the same Admin access token (X-Shopify-Access-Token, added on Lyna's servers).

The REST surface is a request builder:

• Pick a method (GET, POST, PUT, PATCH, DELETE) and a path (for example products.json).
• Add query parameters as key and value pairs.
• Use the curated endpoints menu for common resources: Products, single product, Orders, Customers, Price rules, Inventory levels, Collects, Smart collections, Custom collections, Webhooks, and Shop.

Prefer the GraphQL surface when an equivalent exists; use REST for endpoints that have no GraphQL counterpart.

---

Storefront

Fetch public catalog data with the Storefront API. The Storefront token is public and safe to embed in your client app, so this is the surface your published storefront actually uses.

To run Storefront requests here, the connection needs a public Storefront token provisioned. If it is missing, the explorer prompts you to provision one (or to reconnect the store when the app is missing the unauthenticated_* Storefront scopes). See provisioning a Storefront token in the build flow.

The Storefront endpoint is https://{shop-domain}/api/{version}/graphql.json, called with the X-Shopify-Storefront-Access-Token header.

---

Tokens and scopes

The connected Overview tab shows what the connection can do:

• Granted Admin API scopes, the comma-separated scopes the offline token holds (for example write_products, read_inventory, write_discounts). If the list is empty, the token cannot read or write store data; set the app's Admin API access scopes in Shopify and reconnect.
• Storefront API token, the public token your app uses to read catalog and cart data. Provision it from the Overview tab when a connection has none yet.

Lyna requests a combined OAuth scope set at install: Admin scopes (around the product, variant, collection, discount, price rule, inventory, orders, customers, publications, files, and markets areas) plus the public unauthenticated_* Storefront scopes that back the Storefront token. The granted token holds only the intersection of what Lyna requests and what your Shopify app is configured to allow.

---

Webhooks

The Webhooks tab lists the webhook subscriptions registered for the store, and lets you create or delete them. Shopify sends events to these endpoints when store data changes.

• Create a subscription by choosing a topic and a callback URL. Available topics include APP_UNINSTALLED, APP_SCOPES_UPDATE, SHOP_UPDATE, PRODUCTS_CREATE, PRODUCTS_UPDATE, ORDERS_CREATE, and ORDERS_PAID. The callback URL defaults to Lyna's own Shopify webhook route on the current origin (/webhook/shopify).
• Delete a subscription to stop Shopify from sending that topic to the endpoint.

You can manage the same subscriptions from chat by asking Lyna to list, create, or delete webhooks.

---

Related