Build with confidence: Shopify AI Toolkit's security check
UpdateyesterdayUnverifiedAdded Oct 16, 2026
Shopify AI Toolkit now includes shopify app security check , a security command that checks your app for common vulnerabilities before you ship. You can run it before you submit an app, and on every release, to find problems in your own code and get guidance to fix them.
Topics: AI agents, Security, Pricing, Developer tools, Coding agents
More Shopify developer platform releases
Every Shopify developer platform releaseCheckout footer visibility now applies to merchant-configurable content
The visibility fields on CheckoutBrandingFooterContent and CheckoutAndAccountsConfigurationBrandingFooterContent now control only merchant-configurable footer content. Checkout can display Shopify-provided transaction information in the footer regardless of this setting.
Hydrogen 2026-10 is now available
The new Hydrogen is generally available today. Since the developer preview started in June, we've shipped seven releases based on feedback from developers using it. The big deal about the new Hydrogen is that it isn't a big deal: Hydrogen now works with any JavaScript framework.
Add shopping and Shop Pay checkout to any agent with Shop MCP
Shop MCP lets your agent or app search Shopify Catalog, build carts, and complete Shop Pay checkout through a single MCP connection. It works with over 1 billion products in Shopify Catalog and doesn't require an API key for search. Nothing changes for existing Catalog API integrations, and no action is required.
Detect when a POS extension screen finishes navigating
What changed The POS Navigation API adds the navigatesuccess event. It fires after the destination screen finishes its native transition, and its callback receives a standard Event. currententrychange can fire before the screen finishes appearing, and the navigate() promise doesn’t wait for the transition.
Identify the published version running in a POS extension
What changed shopify.extension.version returns the version of the extension that is running. It’s the same name shown on the Versions page in the Dev Dashboard and chosen when running shopify app deploy. The value is an opaque name, not a version number, so compare it for equality rather than sorting it.
Cart updates that result in no changes to the cart no longer trigger carts/update webhooks
Cart operations that leave the cart unchanged, for example, resubmitting the same values a cart already has, no longer trigger a carts/update webhook. Shopify sends a webhook every time a cart's contents or properties change. Previously, every cart operation produced a carts/update webhook.
Global Catalog REST API stops serving traffic on November 2, 2026
The Global Catalog REST API, which was deprecated in April 2026, stops serving traffic on November 2, 2026. If your app still calls it, you need to migrate to Global Catalog MCP, which implements the Universal Commerce Protocol (UCP), before that date.
Catalog API now returns compare-at prices as `list_price`
The Catalog API now returns a merchant’s compare-at price as list_price on each product variant. Your app or agent can use list_price to tell when a product is marked down and by how much. The price field doesn’t change. No action is required. list_price is an optional field defined in the UCP catalog specification, version 2026-08-25 .
Also shipped on Oct 15, 2026
Shopify in October 2026You can copy tables across regions
You can copy tables across regions . This feature is now generally available (GA).
You can now use column aliases in GoogleSQL
You can now use column aliases in GoogleSQL. This feature lets you define an alias for an expression in the SELECT clause of a SQL query and immediately reference that alias within the same SELECT list or in the WHERE clause of the same query block.
You can export a conversational analytics agent's answer , including text, visualizations, tables, and...
You can export a conversational analytics agent's answer , including text, visualizations, tables, and citations, to a PDF or CSV file. This feature is generally available (GA).
ADBC driver for Power BI is now generally available
The Arrow Database Connectivity (ADBC) driver for the Databricks connector for Power BI is now generally available. ADBC is the default driver for new connections in Power BI Desktop and the Power BI service. See Configure ADBC or ODBC driver for Power BI .
Gemini Enterprise: Anthropic models are available in the Gemini Enterprise app
Administrators can make Anthropic models, Claude Opus 5.5 and Claude Sonnet 5.5, available to users in the Gemini Enterprise app. After an administrator turns on a model in the Enable third-party models section of the Feature Management tab, users can select the model in the model selector.
Pricing
Per image, by resolution . Text to image and image editing cost the same. resolution Price 768sq $0.008 1k $0.009 1.5k $0.011 2k $0.014 4k $0.036