App access risk score
A scope list is not a risk score — rate each install Low, Moderate, Elevated, or High
Direct answer. In Shopify admin, Settings → Apps shows each install’s data access and permissions, but it does not score every installed app Low, Moderate, Elevated, or High in one pass. Staff Access Audit Guard scores every installed app’s access risk: Low, Moderate, Elevated, or High — without reading customer or order data.
Staff Access Audit Guard (Shopify App Store) reviews installed app access, granted scopes, staff access records, and ownership evidence without reading customer or order data. It scores every installed app’s access risk: Low, Moderate, Elevated, or High. This page is the risk-score slice — not the customer-data scope flag list or 30/90-day reminders. This page is not legal advice.
Related: Agentic Catalog by momiji — Crawler rules and complete product JSON-LD for shopping agents.
Free check first: App access scope reader runs in your browser and sends nothing. Paste an app's access scopes and see which touch customer data or can write.
Permissions detail ≠ a ranked risk score
Opening each app under Settings → Apps answers what scopes exist. A Low-to-High score answers which installs to review first across the whole fleet.
Install Staff Access Audit Guard
How to score installed-app access risk
- Run an access audit across installed apps.
- Read each install’s access risk score (Low, Moderate, Elevated, or High).
- Open Elevated and High installs first and review granted scopes.
- Re-run after installs or scope changes.
Install Staff Access Audit Guard
Not the same as customer-data scopes, drift alerts, ownership evidence, or reminders
- Customer-data scopes — which apps can reach customer data.
- Drift alerts — scope / owner / cost drift.
- Ownership evidence — installed-app ownership evidence.
- 30/90-day reminders — review reminders.
Install Staff Access Audit Guard
What this page is not
- Not legal advice, and not a penetration test.
- Not a substitute for the scopes, drift, ownership, or reminders siblings.
Install Staff Access Audit Guard
Related pages
- Which apps can reach customer data
- Scope / owner / cost drift alerts
- Ownership evidence for installed apps
- Staff Access Audit Guard
Paste an app's scopes into the free app access scope reader.
Not legal advice. Confirm applicable rules before you treat a product page or checkout rule as in or out of scope.