Category URL translations documentation
The Translations Admin GraphQL API documentation now covers category URL path translations for multilingual Stencil storefronts.
- Category URLs — a new page documents the
CATEGORY_URL_PATHSresource type, thebc/store/categoryUrlPath/{category_id}resource ID format, and the queries and mutations for listing, updating, and deletingurl_pathtranslations. - Translations overview — the resource type list now links to both the Category URLs and Product URLs pages.
For details, see Translations for Category URLs.
GraphQL Account API rate limits clarified
The documented rate limit for the GraphQL Account API and other /accounts endpoints is now accurate, so you can throttle requests correctly and avoid unexpected 429 Too Many Requests responses.
- Corrected quota — the limit is 2,000 requests per hour (approximately 30 per minute), not the previously documented 70 per hour.
- Sliding-window enforcement — the per-minute allowance is spread evenly over time, so bursts can trigger a
429even when you’re under the hourly limit. Keep requests to roughly 2–3 every 5 seconds. - No rate limit headers —
/accountsendpoints don’t return rate limit response headers, so pace requests proactively and back off on429.
For details, see GraphQL Account API rate limits.
GraphQL Schema Updates
The Account GraphQL schema drops the deprecated createUserWithPassword mutation, completing the security change announced in August 2025 that removed the ability to create a control panel user with a password.
Account GraphQL
createUserWithPasswordremoved: the deprecated mutation is gone from theUserMutationstype. UsecreateUserinstead, which takesCreateUserInput(email, first name, last name, and locale) and returnsCreateUserResult. Passwords are no longer set at user creation.- Supporting types removed:
CreateUserWithPasswordInputandCreateUserWithPasswordResult.
- Supporting types removed:
For schema details, see the createUser mutation.