Shopify is enforcing stricter rate limits on bots and agents accessing its Storefront API and hosted store pages. Unsigned requests now face the tightest restrictions. To qualify for higher rate limits, bot and agent operators must sign their requests using Web Bot Auth, an emerging IETF draft standard. Cloudflare's implementation guide is available as a reference. Merchants who want to crawl their own stores can find ready-to-use Web Bot Auth signatures in the Shopify admin.
Sort: