Free tool

App access scope reader

Direct answer. Paste the access scopes an installed app asks for, for example read_products, write_orders, read_customers, and the page groups each one: customer or order data, store-wide change or finance, other write, or read-only. Each group comes with a question to ask the vendor. It runs in your browser and sends nothing anywhere.

This is a reading aid for a review conversation, not a score or a security verdict, and it does not show what any app checks. To audit every app installed on your store, plus staff and collaborator reviews, try Staff Access Audit Guard (Shopify App Store).

Install Staff Access Audit Guard

Paste scope names

Scopes (comma, space or line separated)

Install Staff Access Audit Guard → review every installed app

How the groups work

Customer or order data: scopes for customers, orders and draft orders, read or write.
Store-wide change or finance: scopes that can edit themes, scripts, checkout branding or content, or that reach payments or staff data.
Other write: any other write_ scope, which lets an app change data and not only read it.
Read-only: read_ and unauthenticated_ scopes outside the groups above.

The groups come from the scope names alone. They are a reading aid for a review conversation, not a risk score: the same scope can be reasonable for one app and unnecessary for another. Where to find the list: the permissions screen shown when an app is installed, or the app’s own listing or support page.

Install Staff Access Audit Guard on the Shopify App Store

What this page is not

Not a security assessment and not a score of your store.
Not a list of everything Staff Access Audit Guard checks; the audit in the app uses its own classification.
Not a check of staff accounts, collaborators or app costs.
Not a data collector: scope names you paste stay in this browser tab.