Shopify Storefront API · Rate Limits
Shopify Storefront Rate Limits
Shopify documents that the Storefront API has no rate limits applied on the number of requests. Suspicious traffic can be rejected with 430, and there is a per-minute checkout creation throttle that returns a 200-with-Throttled error when exceeded.
3 Limits
CommerceEcommerceHeadlessGraphQLStorefrontRate Limiting
Limits
Storefront API requests shop
no published rate limit
Shopify states there are no rate limits applied on the number of requests that can be made to the Storefront API.
Checkout creation throttle shop
see docs
A throttle exists on checkouts created per minute; exceeding it returns a 200 response with a "Throttled" error.
Security rejection client
see docs
Suspicious traffic patterns can be rejected with HTTP 430 Shopify Security Rejection.
Policies
No Per-Request Rate Limit
Storefront API does not enforce a published per-second or per-minute request rate ceiling; clients should still implement reasonable client-side throttling and caching.
Checkout-Specific Throttling
Checkout-creation traffic is throttled separately from product/cart reads. Retry on the next bucket window when a Throttled error is received.
Security Posture
Bot-like or abusive request patterns may be rejected with 430. Identify clients with a unique user agent and respect Retry-After when present.