SHOPIFY PERMISSION EVIDENCE

Turn an authorized app export into an inventory you can compare.

Agencies reviewing an install usually have a GraphQL dump, not the inventory JSON the drift checker wants. Paste a customer-authorized appInstallations response (or an already-valid inventory). The page keeps granted scopes separate from declared ones, warns when webhooks were omitted, and never talks to Shopify.

Already have two inventories? Compare → drift record.

Paste export JSON

Nothing is uploaded. The API version field is used only when the dump omits it.

Normalized inventory

No capture yet.

Your inventory summary will appear here.

Common questions

How do I create a Shopify app permission inventory without the Admin API?

Export only app metadata from a store you are authorized to administer — typically an Admin GraphQL appInstallations response with granted accessScopes and webhook topics. Paste it here, add the API version if the dump omitted it, and download the inventory JSON. The page does not connect to Shopify.

Does this treat requested scopes as granted?

No. Requested or declared scopes are stored separately. If an export has only declared scopes, capture refuses instead of inventing a granted list.