What does n8n's Shopify node cover?

Orders and products: Create, Delete, Get, Get All and Update for each. Customers, fulfillments, collections, metafields and inventory need the HTTP Request node with the Shopify credential.

Which credential should I use?

An Access Token from a custom app installed in your store, which n8n recommends. OAuth2 is for public apps with a Partner account; the API key method is deprecated.

Why do I get Forbidden on orders?

A scope is missing. n8n's docs note that read_orders also needs read_products. Add the scopes to the custom app and reinstall it.

Should new calls use REST or GraphQL?

Shopify marks the REST Admin API as legacy since October 2024 and requires GraphQL for new public apps since April 2025. For calls outside the node, prefer GraphQL.

Pipedream Shopify steps in n8n

Updated 2026-10-21 · 3 min read · n8n: Shopify (Native n8n node)

Shopify workflows on Pipedream react to store events and push data elsewhere: a new order goes to a sheet or an ERP, an abandoned cart triggers an email, a product update syncs inventory. n8n has a native Shopify node and a Shopify Trigger. The node is narrow (orders and products), so expect some HTTP Request nodes.

The n8n side

Shopify node (n8n-nodes-base.shopify):

Order: Create, Delete, Get, Get All, Update
Product: Create, Delete, Get, Get All, Update

Shopify Trigger: registers a Shopify webhook for the topic you pick (orders, products, customers, carts, fulfillments and others).

What maps where

Pipedream (apps `shopify`, `shopify_developer_app`)	In n8n	Status
Get Order (developer app), Search for Orders	Shopify → Order → Get / Get All with filters	manual
Create Product, Update Product	Product → Create / Update	manual
Add Tags, Cancel Order	HTTP Request (GraphQL `tagsAdd`, `orderCancel`) with the Shopify credential	manual
Cancel Fulfillment, fulfillment orders	HTTP Request (GraphQL)	manual
Add Products to Custom Collection, Create Article	HTTP Request	manual
New Order Created, New Paid Order (developer app), New Product Created, Collection Updated (Instant), New Event Emitted (Instant)	Shopify Trigger with the matching topic	manual
New Abandoned Cart, New Article, New Page	Schedule Trigger + HTTP Request polling	manual
Code step with `this.shopify.$auth.oauth_access_token` and `shop_id`	Code node; values become `SHOPIFY_OAUTH_ACCESS_TOKEN` and `SHOPIFY_SHOP_ID`	automatic, review

Shopify actions are not in the converter's automatic list; the free report lists each with its props (order ID, tags, product fields).

Credentials

n8n's Shopify credential page lists:

Access token (recommended): create a custom app in the Shopify admin, give it Admin API scopes, install it, copy the Admin API access token. Also enter the shop subdomain and the app secret.
OAuth2: for public apps, needs a Shopify Partner account.
API key: deprecated.

Typical scopes: read_orders, write_orders, read_products, write_products; add read_customers and others for HTTP Request calls. Pipedream's connection used Pipedream's app; your custom app is new and needs the scopes again.

Typical migration: new orders to a sheet

Pipedream: Shopify (developer app) New Order Created → Google Sheets Add Single Row. n8n: Shopify Trigger (orders/create) → HTTP Request (Sheets append, converted automatically). Shopify sends the full order JSON in the webhook, so no extra Get Order call is needed.

Pitfalls

REST is legacy. Shopify marked the REST Admin API legacy on 1 October 2024; new public apps must use GraphQL since April 2025. The n8n node still works for orders and products; write new calls in GraphQL.
Rate limits. REST allows 40 requests per app per store with a refill of 2 per second (10 times that on Shopify Plus); over that you get 429 with Retry-After. GraphQL uses a cost-based limit. Loops over all products need Wait nodes.
Forbidden errors. Usually a dependent scope: read_orders also needs read_products.
Old orders. Without the read_all_orders scope, the API only returns orders from the last 60 days.
Webhooks during switch. Shopify keeps Pipedream's webhook subscriptions until they are removed. Deactivate the Pipedream workflow so orders are not processed twice.

How to move your Shopify workflows

Export the workflows from Pipedream.
Upload on /convert; the free report shows Shopify steps and the scopes to request.
Download the n8n JSON: 1 workflow is free; full export: $3 per workflow, $19 minimum — coming soon.

See the Pipedream to n8n guide and the code step checker. Related: Stripe, QuickBooks, Google Sheets.

FAQ

What does n8n's Shopify node cover?: Orders and products: Create, Delete, Get, Get All and Update for each. Customers, fulfillments, collections, metafields and inventory need the HTTP Request node with the Shopify credential.
Which credential should I use?: An Access Token from a custom app installed in your store, which n8n recommends. OAuth2 is for public apps with a Partner account; the API key method is deprecated.
Why do I get Forbidden on orders?: A scope is missing. n8n's docs note that read_orders also needs read_products. Add the scopes to the custom app and reinstall it.
Should new calls use REST or GraphQL?: Shopify marks the REST Admin API as legacy since October 2024 and requires GraphQL for new public apps since April 2025. For calls outside the node, prefer GraphQL.