
Shopify API changes: scope downgrades and request limits
Separate a live Customer Account API request limit from a permission downgrade feature in the 2027-01 release candidate.
The noticeboard
What changed this week for store founders: Shopify updates, the wider industry, and the marketing moves worth copying. Pinned up here between Fridays.

Separate a live Customer Account API request limit from a permission downgrade feature in the 2027-01 release candidate.

Klaviyo can clone saved HTML emails into drag and drop templates. Here is where to start, what stays unchanged and what to check before sending.

Shopify’s new checker combines local scans with agent review. Here is how to run it, understand its limits and review findings before release.

Forter’s 13 October announcement separates live agent-fraud protection from checkout orchestration. Merchants should verify access, integration and reporting.

Shopify-provided transaction copy can remain when merchant footer content is hidden. Checkout-branding previews and tests should reflect the distinction.

Shopify’s 2026 Entrepreneur Effect report separates recorded partner payouts from modelled economic activity. Here is how to cite the figures accurately.

Amex’s 13 October framework carries authenticated purchase instructions into an agent transaction. It is not a universal merchant rollout.

Klaviyo says SQL answers use shared metric definitions across Composer and MCP-connected agents. Merchants should still inspect the query and data scope.

The 14 October release makes Hydrogen a library for existing JavaScript frameworks, with commerce features and version-matched coding-agent skills.

Checkout and Customer Account UI extensions declaring metafields must add owner_type before moving to API version 2027-01.

Shopify’s 13 October launch connects product discovery, carts, checkout and orders. Here is what merchants and agent builders should check.

Sidekick can explain saved checkout settings and guide merchants to the right controls. It cannot edit, save or publish the configuration.