Can robots.txt block Shopify Webhooks?

No. Shopify posts to a registered endpoint directly. Remove or change the subscription to stop legitimate deliveries.

How should an HTTPS webhook be authenticated?

Calculate the HMAC-SHA256 of the raw body with the app's client secret, base64-encode it, and compare it with `X-Shopify-Hmac-SHA256` in constant time.

Why did one Shopify event run twice?

A timeout or failed response can cause another delivery, and duplicates are possible. Use `X-Shopify-Webhook-Id` or idempotent writes to prevent repeated side effects.

Does accepting a Shopify webhook affect AI visibility?

No. Shopify documents webhooks as an app integration mechanism, not as a way to submit content to AI search or training systems.

Shopify Webhooks AI Crawler Guide

What is Shopify Webhooks?

A Shopify webhook starts with a subscription. An app chooses an event topic and a destination, then Shopify sends that destination an HTTP POST when the event occurs. Product updates, order changes, and similar shop activity can reach an integration without the integration repeatedly polling Shopify's Admin API.

HTTPS deliveries have a JSON body and Shopify headers for the topic, shop domain, API version, signature, and delivery ID. In access logs, that looks like traffic to a callback route rather than a client moving through storefront pages. The same delivery can appear again after a failed request or network timeout, which is why Shopify gives it an ID.

The subscription and callback endpoint are the controls that matter. Shopify already knows the destination because the app registered it. It does not discover that URL by following links, and robots.txt has no authority over a webhook POST. The receiver needs to authenticate the request and avoid doing slow work before it acknowledges delivery.

Nothing in Shopify's webhook documentation connects these requests with AI search or model training. A webhook may tell another system that product copy changed, but that later publishing workflow is separate. Receiving the event neither submits a storefront to an AI index nor grants permission to train on its pages.

Relevant for AI search

Is Shopify Webhooks relevant for AI search?

Yes. Shopify Webhooks collects pages for an AI product, so what it can crawl influences how AI systems describe your brand.

Shopify Webhooks works with product and shopping data so the service behind it can list, compare, or sync products. As shopping moves into AI assistants and comparison surfaces, a crawler like this decides which merchants appear there.

How to handle Shopify Webhooks

Skip robots.txt for this traffic. There is no crawler token to address, and a file intended for cooperative crawlers cannot secure a configured callback.

For an HTTPS delivery, compute the HMAC-SHA256 over the untouched request body with the app's client secret. Compare the base64 result with X-Shopify-Hmac-SHA256 using a constant-time comparison, and reject a mismatch before acting on the payload. Record X-Shopify-Webhook-Id, or make the operation idempotent, so a repeated delivery cannot apply the same change twice.

Acknowledge valid requests with a 2xx response promptly, then do expensive work in a queue. Timeouts and error responses lead to retries. If an integration has been retired, remove its webhook subscription in Shopify and close the callback deliberately instead of leaving a firewall rule to generate repeated failures.

Examples

A catalog service receives `products/update`, verifies the HMAC against the raw body, stores the webhook ID, and queues its own update before returning 200.
An old order callback keeps returning 500. Its logs show the same `X-Shopify-Webhook-Id` more than once, so the app owner removes the obsolete subscription instead of adding a robots.txt rule.

Frequently asked questions about Shopify Webhooks

Learn about AI visibility monitoring and how Promptwatch helps your brand succeed in AI search.

A Shopify app or shop configuration subscribed that URL to an event topic. Review the webhook subscriptions associated with the app if the destination is unexpected.

Related bots

Amazon Seller Initiated Listing

Amazon's web crawler that helps sellers succeed by giving them the option to provide a URL to a website and create high-quality product pages in Amazon's store.

E-commerce