Shopify access token
ID shopify_access_token
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Access token of a Shopify app. The prefix tells the kind of token: shpat_ for an app access token, shpca_ for a custom app and shppa_ for a private app. 32 hexadecimal digits follow.
- Parent datatype
- Access token
access_token - Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 63/100 · missing: examples, authoritative source link, mapping (Wikidata, Schema.org, ...), translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Gitleaks, TruffleHog
Regular expression
^shp(?:at|ca|pa)_[a-fA-F0-9]{32}$Python re syntax.
Examples
| Value | Description |
|---|---|
| shpat_ExampleTokenNotReal invalid | Not hexadecimal and too short |
| shpss_0123456789abcdef invalid | Prefix of a shared secret |
Sources
- other: https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml
- other: https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/shopify/shopify.go
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/shopify_access_token - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/shopify_access_token.yamlon GitHub