Shopify Mandates IP Allowlisting for Public Apps to Prevent Unauthorized Admin API Access
Shopify is making IP allowlisting mandatory for public apps that call its Admin API, adding a security check to limit the use of stolen access tokens. Developers must enable the control by November 20, 2026, at 11:59 PM ET. Apps using bulk operations…