EC
430
HTTPERRORNotable4xx Client Error (Unofficial)MEDIUM confidence

Request Header Fields Too Large (Shopify) / Security Rejection

Production Risk

Low — only encountered when making requests to Shopify-hosted stores at high volume.

What this means

430 is used by Shopify to indicate that the request has been rejected by their security layer, typically due to suspicious request patterns, WAF rules, or bot detection. It is distinct from the standard 431 (Request Header Fields Too Large).

Why it happens
  1. 1Shopify's WAF or bot-detection system flagged the request as suspicious.
  2. 2The request was made by an automated tool or scraper that triggered security rules.
  3. 3An unusually large number of requests from the same IP within a short period.
  4. 4The request contained headers or a user agent pattern associated with malicious bots.
How to reproduce

Automated requests or scripts hitting Shopify storefronts at high frequency.

trigger — this will error
trigger — this will error
GET /products.json HTTP/1.1
Host: mystore.myshopify.com
User-Agent: python-requests/2.28.0
# High-frequency automated request

expected output

HTTP/1.1 430 Request Header Fields Too Large

Fix

Slow down request rate and use a browser-like User-Agent

WHEN Legitimate automation is being blocked.

Slow down request rate and use a browser-like User-Agent
# Add delays and a realistic User-Agent
import time
headers = {'User-Agent': 'Mozilla/5.0 ...'}
time.sleep(2)  # between requests

Why this works

Reduces the signal patterns that trigger Shopify's security rules.

What not to do

✕ Do not scrape Shopify storefronts with automated tools without using their API

Use the Shopify Storefront API or Admin API instead — they provide authorised programmatic access.

Version notes
Shopify

Specific to Shopify's infrastructure. Not a standard IETF code.

Content generated with AI assistance and reviewed for accuracy. Found an error? hello@errcodes.dev

← All HTTP errors