curl --silent --show-error --fail-with-body --request POST \
--url 'https://api.example.com/api/webhooks/shopify/orders' \
--header 'x-shopify-hmac-sha256: YOUR_API_KEY' \
--header 'x-shopify-topic: REPLACE_WITH_X_SHOPIFY_TOPIC' \
--header 'x-shopify-shop-domain: REPLACE_WITH_X_SHOPIFY_SHOP_DOMAIN' \
--header 'Content-Type: application/json' \
--data '{}'
{
"ok": true,
"tagged": true,
"tags": [
"priority"
]
}
Shopify orders webhook (tags chat-attributed orders)
Raw JSON body (2 MB limit) verified against x-shopify-hmac-sha256. Orders without stateset* note attributes are acknowledged and skipped…
POST
/
api
/
webhooks
/
shopify
/
orders
curl --silent --show-error --fail-with-body --request POST \
--url 'https://api.example.com/api/webhooks/shopify/orders' \
--header 'x-shopify-hmac-sha256: YOUR_API_KEY' \
--header 'x-shopify-topic: REPLACE_WITH_X_SHOPIFY_TOPIC' \
--header 'x-shopify-shop-domain: REPLACE_WITH_X_SHOPIFY_SHOP_DOMAIN' \
--header 'Content-Type: application/json' \
--data '{}'
{
"ok": true,
"tagged": true,
"tags": [
"priority"
]
}
Raw JSON body (2 MB limit) verified against
x-shopify-hmac-sha256. Orders without
_stateset_* note attributes are acknowledged and skipped. Attributed orders are
recorded as an analytics event and tagged in Shopify; a tagging failure answers 202.
Headers
Request body
object
A Shopify Order resource. Only id, name, note_attributes, tags and customer fields are read.
Response
object | object
Status codes
| Code | Meaning |
|---|---|
200 | Processed or skipped |
202 | Attributed order recorded but Shopify tagging did not succeed |
400 | Body is not valid JSON |
401 | HMAC verification failed |
500 | Unhandled error |
Using this contract
Read the source OpenAPI document for declared schemas and alternatives. This page also includes documented corrections from the spec overlays. Example IDs and values are illustrative; replace them with records from your workspace.curl --silent --show-error --fail-with-body --request POST \
--url 'https://api.example.com/api/webhooks/shopify/orders' \
--header 'x-shopify-hmac-sha256: YOUR_API_KEY' \
--header 'x-shopify-topic: REPLACE_WITH_X_SHOPIFY_TOPIC' \
--header 'x-shopify-shop-domain: REPLACE_WITH_X_SHOPIFY_SHOP_DOMAIN' \
--header 'Content-Type: application/json' \
--data '{}'
{
"ok": true,
"tagged": true,
"tags": [
"priority"
]
}
Last modified on November 13, 2026