;}%20.st6{fill:url(%23SVGID_00000021089067129159788970000008246765442136188072_);}%20.st7{fill:url(%23SVGID_00000117639240116366130650000015074833605515028638_);}%20.st8{opacity:0.4;fill:url(%23SVGID_00000101781798616409025840000016567063639337360777_);}%20.st9{opacity:0.4;fill:url(%23SVGID_00000052086836598721292040000002033117744178971046_);}%20.st10{opacity:0.4;fill:url(%23SVGID_00000159460939004760751800000002448009281983951536_);}%20.st11{opacity:0.4;fill:url(%23SVGID_00000013177830667419993080000017721442101626521532_);}%20.st12{opacity:0.4;fill:url(%23SVGID_00000152235521444854938490000006526001119318383285_);}%20.st13{opacity:0.4;fill:url(%23SVGID_00000119823135212293698520000012774889010992664993_);}%20%3c/style%3e%3cg%3e%3cpolygon%20class='st2'%20points='134.78,14.22%20114.31,48.21%20101.33,69.75%20158.22,69.75%20177.97,36.95%20191.67,14.22%20'/%3e%3cpolygon%20class='st3'%20points='227.55,69.75%20186.61,69.75%20101.33,69.75%20129.78,119.02%20158.16,119.02%20228.61,119.02%20256,119.02%20'/%3e%3cpolygon%20class='st3'%20points='136.93,132.47%20116.46,167.93%2073.82,241.78%20130.71,241.78%20144.9,217.2%20180.13,156.18%20193.82,132.46%20'/%3e%3cpolygon%20class='st3'%20points='121.7,131.95%20101.23,96.49%2058.59,22.63%2030.15,71.91%2044.34,96.49%2079.57,157.5%2093.26,181.22%20'/%3e%3cpolygon%20class='st2'%20points='64.81,131.95%2025.15,131.21%200,130.74%2028.44,180.01%2066.73,180.72%2093.26,181.21%20'/%3e%3cpolygon%20class='st2'%20points='165.38,181.74%20184.58,216.46%20196.75,238.47%20225.19,189.2%20206.66,155.69%20193.83,132.46%20'/%3e%3c/g%3e%3c/svg%3e)
Windmill HubShopify
E-commerce Dev Dashboard app client credentials, or a legacy custom-app tokenSearch and update orders, products, customers and inventory on a Shopify store from any Windmill script, flow or app.
Set up in 4 steps
Create an app in the Dev Dashboard
A store owner creates an app in the Dev Dashboard (dev.shopify.com), adds the Admin API scopes the scripts need, releases a version and installs it on the store.
Connect it in Windmill
Open Resources, click Add a resource/API and pick shopify under Others. Enter the store subdomain (yourshop for yourshop.myshopify.com, not a custom domain) and the app's client ID and secret; Windmill gets and renews the token, with no Windmill admin step.
Or paste an existing token
A custom app created in the store admin before 2026 still works: fill store_name with the subdomain and token with its non-expiring shpat_ token.
Run your first script
Run Get Shop or Search Orders to check the connection before writing anything.
Scripts
Building blocks, if none of the projects above fit. Fork one, run it, or call it as a step inside your own flow.
Update Metaobject
Send Order Invoice
Run Bulk Query
Remove Tags
Release Fulfillment Order Hold
Process Return
List Metaobjects
Hold Fulfillment Order
GraphQL Query
Get Bulk Operation
Create Return
Create Metaobject
Add Tags
Delete Page
Update Product Variant
Create Customer
Get Discount Code
Complete Draft Order
Search Draft Orders
Create Custom Collection
Create Fulfillment
Get Fulfillment Order
List Fulfillment Orders
Update Page
Set Metafield
Create Product Variant
Cancel Order
Create Draft Order
Cancel Fulfillment Order
Refund Order
Trigger flows from Shopify
Shopify is not only a destination. These inbound paths are supported today.
Shopify webhooks on an HTTP route
Create a Windmill HTTP route with Signature authentication, Custom scheme: header X-Shopify-Hmac-Sha256, sha256, base64, no prefix, secret the admin's webhook signing key (or the app's client secret for app-created webhooks). Subscribe it to topics such as orders/create under Settings → Notifications → Webhooks, or with webhookSubscriptionCreate through the GraphQL Query script.
Resource type
The shape of the credential every script on this page expects.
shopify
View raw schema →| Field | Type | Required | What it is |
|---|---|---|---|
| store_name | string | Yes | The store's subdomain only: yourshop for yourshop.myshopify.com. |
| token | string | Yes | Admin API access token. Connect with OAuth (client credentials of a Dev Dashboard app installed on the store) to have Windmill refresh it, or paste a non-expiring shpat_ token from a custom app created in the Shopify admin. |
Questions
A call fails with ACCESS_DENIED or a missing scope
Scopes come from the installed app version, not the token: add the scope in the Dev Dashboard, release a new version and approve the update on the store. Customer and order data also need protected customer data access on the app.
There is no Connect button on my instance
Shopify connects under Others with your own app's client ID and secret, so no Windmill admin setup is needed. If shopify is not offered there, your Windmill version predates it: paste a token instead.
Is my token stored on the hub?
Never. It lives only in your own Windmill workspace, encrypted at rest.