Can't find Admin API access token in Shopify custom app — only seeing API key and secret key
I'm building a custom Next.js storefront that needs to create draft orders via the Shopify Admin API. I created a custom app in my store admin (Settings → Apps → Develop apps), configured the write_draft_orders scope under Admin API integration, and installed the app.
But in the API credentials tab, I only see:
- API key (starts with a hex string)
- API secret key (shpss_...)
I don't see any "Admin API access token" with a "Reveal token once" button. Every token I try either gives me ACCESS_DENIED for draftOrderCreate or a 401.
I've tried:
- Using the shpss_ secret key as a bearer token → 401
- Using the shpat_ token from the Storefront API section → only has unauthenticated_* scopes, no admin access
- Uninstalling and reinstalling the app → same result
The GraphQL error is:
Access denied for draftOrderCreate field. Required access: write_draft_orders access scope
Checking /admin/oauth/access_scopes.json with every token I have only returns unauthenticated_* scopes.
Has the Admin API access token location changed in recent Shopify updates? Am I missing a step? Any help appreciated.
EDIT:
I have turned on the write_draft_orders access scope on the dev dashboard but the error is still the same, when I try to curl my api keys, the response contains the scopes from a headless storefront application