Check which scopes an app requests, whether each matches a feature you will use, and whether any write scope is needed at all. Decline or ask the vendor about scopes that read customer or order data without an obvious reason. Fewer scopes means less damage if the app is compromised.
What scopes are
Shopify's access scopes documentation says scopes control which store data an app can read and write. It advises requesting only the data the app needs to function, and notes that any scope that writes a resource also grants read access to it, so write scopes should be requested only when both are needed. It also says the platform restricts access to certain scopes for apps without a legitimate use for the data.
The same logic applies to any platform that lets third party apps connect to a store through permissions.
How to read a scope list
- Write down the features you want from the app, in plain words.
- For each requested scope, find the feature that needs it. Unmatched scopes are questions for the vendor.
- Flag write scopes. Ask why the app must change products, orders or customers rather than read them.
- Flag customer and order data. These carry personal information, so ask how long it is kept and where it is stored.
- Compare with a simpler alternative. If another app asks for fewer scopes for the same job, that is a point in its favor.
Risk by scope type
| Scope pattern | Typical question |
|---|---|
| Read products | Low risk, but does the app need all of them? |
| Write products | Could a bug or compromise change prices or listings? |
| Read orders or customers | What personal data leaves your store? |
| Write orders | Could it alter or cancel orders? |
| Storefront scopes | Are they needed for a public facing feature? |
After install
Scopes can change. When an app updates and asks for more access, treat it like a new install and repeat the review. Once a year, list all installed apps, remove those unused, and confirm the ones you keep still need what they hold. Our plugin and app vetting checklist covers the other questions to ask a vendor.
Try it yourself
Click through it at your own pace, or open it full screen. Look at how findings are tracked from detection to closure.
Quick check
If an app asks for write access, is it unsafe?
Not automatically. It should match a feature you use. If it does not, ask or choose another app.
Does a read only scope mean no risk?
No. Reading customer or order data can still expose personal information if the app is compromised.
Sources
Safeguard's asset discovery and dependency scanning help you keep track of what is connected to your code, and the free scan is at gold.safeguard.sh/scan.
Last reviewed: 19 October 2026.
