Shopify Product Data Access
On 26 March, Dev.to reported that developers could pull product data from any Shopify store with a single API call. It said that adding /products.json to a store address exposes the product catalogue without an API key.
By 1 August, a second Dev.to post called the endpoint “Shopify’s Open Secret” and claimed that every store exposes /products.json. Other Dev.to articles described using the endpoint to read Shopify catalogues, build a Xiaohongshu (RedNote) e-commerce scraper for RedShop product data, create an AI shopping assistant for Shopify stores, turn a joke product generator into an API, CLI and faker.js plugin, and move from Liquid to Hydrogen for headless Shopify development. This access to product data gives small coding projects considerable material.
Assuming the claim is factual, impact is 10%. Developers can retrieve Shopify product catalogues without obtaining an API key, reducing the setup required for scrapers, shopping assistants and product-data tools. Shopify store operators are affected because others can read and reuse their exposed catalogue data through a predictable endpoint. The reports limit the exposure to product information and make no claim of a wider store compromise.
Watch for Shopify documentation or platform changes that confirm, restrict or alter access to /products.json. Tests across a broader set of stores would also show whether Dev.to’s “every store” claim holds.
<p>Almost every Shopify store publishes its whole public catalog as JSON. There's no API key, no app and no scraping of HTML. Add <code>/products.json</code> to the store's
<p>When Xiaohongshu (RedNote / Little Red Book / 小红书) launched RedShop — its US-facing e-commerce platform — in April 2026, I noticed every existing scraper on Apify only covered
<p>A while back I built <a href="https://anycrap.shop" rel="noopener noreferrer">Anycrap</a> — a fake store full of absurdist AI-generated products. It hit #1 on Hacker News, got
<p>I've spent the last few years living inside headless CMS platforms: Contentful, Strapi, content modeling, migrations, and the React and Next.js frontends that sit on top of
<p>A website chatbot can answer questions, but what happens after the conversation ends?</p> <p>Does the business know who was interested? Can the team review what the visitor
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →