--- title: "The Core Shopify APIs for Headless Storefronts Built With Shopify" slug: "shopify-core-apis-overview" published: "2025-07-16" updated: "2025-12-25" categories: - "Shopify" llm-intent: "reference" framework-versions: - "unspecified" status: "stable" llm-purpose: "Discover the essential Shopify APIs for building a headless storefront. Learn the differences between Storefront API, Admin API, and Customer Account API," llm-prereqs: - "General familiarity with the article topic" llm-outputs: - "Completed outcome: Discover the essential Shopify APIs for building a headless storefront. Learn the differences between Storefront API, Admin API, and Customer Account API," --- **Summary Triples** - (Storefront API, purpose, Client-facing operations: product/collection display, product search, cart creation/updating, and starting checkout) - (Storefront API, access_token_type, Public access token safe to embed in frontend apps) - (Storefront API, rate_limiting, Rate limits applied per buyer IP address) - (Storefront API, resource_ids, Resource IDs are base64-encoded and do not match Admin API ID formats) - (Admin API, purpose, Server-side management of sensitive store data and configuration (products, orders, inventory, metaobjects)) - (Admin API, access_token_type, Secret tokens / API keys that must remain server-only) - (Admin API, use_cases, Create/update/delete products/collections, manage orders, inventory, fulfillments, and integrations) - (Customer Account API, purpose, Manage authenticated customer actions: login, account details, addresses, and customer order history) - (Customer Account API, access_requirements, Requires authenticated customer session or token; not for anonymous public use) - (Headless architecture guidance, recommendation, Use Storefront API for public UI interactions, Admin API for backend/secure operations, and Customer Account API for authenticated customer workflows) ### {GOAL} Discover the essential Shopify APIs for building a headless storefront. Learn the differences between Storefront API, Admin API, and Customer Account API, ### {PREREQS} - General familiarity with the article topic ### {STEPS} 1. Follow the detailed walkthrough in the article content below. # The Core Shopify APIs for Headless Storefronts Built With Shopify > Discover the essential Shopify APIs for building a headless storefront. Learn the differences between Storefront API, Admin API, and Customer Account API, Matija Žiberna · 2025-07-16 As I've been developing [headless Shopify storefronts](https://www.buildwithmatija.com/blog/shopify-headless-vs-liquid-when-to-choose), I keep coming back to three main APIs. No matter which framework I use, whether it's Next.js, Remix, or another, these are the key tools that power almost everything for modern, custom shopping experiences: - **Storefront API** - **Admin API** - **Customer Account API** Below, I'll summarize what each API does, when I use it, and a few important points based on real-world development. --- ## Storefront API The Storefront API is for anything that customers interact with directly. I use it to display products, collections, and to manage shopping carts from the client side. The API is designed for fast, public-facing operations. **Common use cases for Storefront API:** - Fetching product and collection information - Searching for products or collections - Creating and updating shopping carts - Starting the checkout process **Access information:** - Uses a public access token, which is safe for frontend use - Requests are rate-limited based on the buyer’s IP address It is important to note that the Storefront API’s resource IDs are base64-encoded and do not match the format used by the Admin API. --- ## Admin API The Admin API is used for managing store data that should never be exposed to customers or on the public web. Any changes to store configuration or sensitive operations belong here. This API is for server-side use only. **Common use cases for Admin API:** - Creating, updating, and deleting products or collections - Managing orders, inventory, and fulfillment processes - Working with metaobjects and advanced Shopify features - Any backend process or integration that requires full data access **Access information:** - Uses secret tokens or API keys, which should only be available to servers - Supports both REST and GraphQL endpoints - Requires careful permission management for security Never expose your Admin API credentials on the frontend or client-side; these should always be kept secure on your backend. --- ## Customer Account API The Customer Account API is Shopify’s newer API dedicated to everything related to customer authentication and account management, especially in headless setups. With the Customer Account API, authentication is handled using OAuth2, and users can log in without passwords by using one-time codes. **Common use cases for Customer Account API:** - Signing up or logging in customers in a passwordless flow - Retrieving and updating customer profile information - Displaying a customer’s order history and addresses - Managing customer metafields for personalized experiences **Access information:** - Authentication is managed via OAuth2 flows and session cookies - Most of the authentication logic is offloaded to Shopify, which simplifies implementation and increases security Shopify intentionally made this API separate from the Storefront and Admin APIs to improve privacy and comply with data protection standards. You specifically request only the information your application needs. **Typical workflow:** 1. Customer registers or logs in using a code sent by email 2. Shopify returns a session token, which I store in a browser cookie 3. Use this session to access customer profile or display order history --- ## Quick Reference Table | API | Main Use | Access Type | Used In | |----------------------|----------------------------------------|------------------|---------------| | Storefront API | Product data, cart, checkout | Public/token | Frontend | | Admin API | Store management, configuration | Private/key | Server | | Customer Account API | Authentication, customer information | OAuth2/session | Frontend/server | --- ## Why This Structure? Separating these APIs provides security, clarity, and efficiency. Each API has a specific purpose. Storefront API is for customer-side data, Admin API is for private store management, and the Customer Account API focuses on secure customer accounts and privacy. --- ## What’s Next In upcoming articles, I will go deeper into each API. I plan to show setup instructions, practical code examples, and common patterns for integrating these APIs into different frameworks. If you need a specific guide or have any questions, let me know. This overview should help you start planning or building your headless Shopify project with the right tools from the beginning. Thanks, Matija ## LLM Response Snippet ```json { "goal": "Discover the essential Shopify APIs for building a headless storefront. Learn the differences between Storefront API, Admin API, and Customer Account API,", "responses": [ { "question": "What does the article \"The Core Shopify APIs for Headless Storefronts Built With Shopify\" cover?", "answer": "Discover the essential Shopify APIs for building a headless storefront. Learn the differences between Storefront API, Admin API, and Customer Account API," } ] } ```