← Shopify Permission Drift Record
This tool vs. miniOrange
Two different shapes: miniOrange sells an ongoing, connected monitoring subscription that watches every installed app's live activity across your store. This page is a free, offline worksheet for one question — exactly what changed between two permission exports you already captured, before you approve or escalate a specific install.
What each tool is for
miniOrange sells Shopify Activity Monitoring & Anomaly Detection as part of its broader CASB (Cloud Access Security Broker) product line. It is an installed app that connects to your store's API, records which installed app performed each operation (including mutations and high-risk actions), compares granted scopes against what an app actually does, and watches for anomalies — a new IP address, an odd access time, a spike in request volume — assigning each a composite risk score. It runs continuously and is sold as an ongoing subscription. miniOrange's own current plan names and prices are not reachable from this session to confirm, so no dollar figure for it is invented here: only its well-documented identity and category — a connected, continuous Shopify activity-monitoring and anomaly-detection service — are stated.
This tool does none of what miniOrange does. It never connects to Shopify and holds no ongoing session with your store. You export an app-permission inventory yourself — app ids, granted scopes, webhook topics, authorization state, API version, source, and capture time — at whatever two points in time you choose, using the GraphQL query, the CLI, or the browser capture page this site also provides. Paste or upload both exports and the page lists exactly which apps, scopes, webhooks, or authorization states changed, marks a reversed capture order as inconclusive rather than unchanged, and lets you download a portable JSON evidence record or copy a ticket-ready summary. It runs free in any browser, keeps no account, and uploads nothing you paste.
| Question | Where to answer it |
|---|---|
| I want every installed app's live activity watched continuously, with anomalies flagged and risk-scored as they happen. | miniOrange, or a comparable CASB — ongoing live monitoring is not something this tool does. |
| Exactly which scopes, webhooks, or authorization states changed between two exports I already captured? | This tool — free, instant, private, no account, no Shopify connection. |
I only have a GraphQL appInstallations dump, not the inventory shape this page compares. | This site's own capture page normalizes it first, still with no Shopify call. |
| I need my whole security team watching one connected dashboard across every store and every app, continuously. | miniOrange — built as an ongoing, connected subscription for exactly that job. |
| Do I need to install an app or grant Shopify API access to use the tool? | This tool: no. miniOrange is used as an installed, connected app. |
Most agencies and merchants get different value from each: miniOrange (or a comparable CASB) for continuous, connected monitoring of every app's live behaviour across a store, and a free point-in-time tool like this one for a fast, private, no-login record of what changed between two specific captures before one approval or ticket. This page's own output is a before-and-after evidence record, not a live monitoring feed, a risk score, or a security certification.
This tool needs no account, no sign-in, and no Shopify API access: it is a static page, the comparison runs in your browser, and once it has loaded it keeps working with the connection off.
Common questions
Should I use this tool or miniOrange's Shopify monitoring?
They do different jobs. miniOrange sells Shopify Activity Monitoring & Anomaly Detection as part of its broader CASB product line: an installed app that connects to your store's API, records what installed apps actually do, compares granted scopes against that behaviour on an ongoing basis, and assigns a composite risk score to anomalies such as a new IP address, an odd access time, or a spike in requests. It is sold as a continuing subscription and it watches your store live. This tool does none of that. It never connects to Shopify and holds no ongoing session with your store. You capture two app-permission inventories yourself, at whatever two points in time you choose, and paste or upload them; the page lists exactly which apps, granted scopes, webhook topics, or authorization states changed between the two, then lets you download a portable JSON evidence record or copy a plain-text ticket summary. A store that wants continuous, live anomaly monitoring across every app's behaviour is better served by miniOrange or a comparable CASB; an agency or merchant who needs a fast, private, before-and-after record for one specific approval or ticket is in the right place here.
Is this page affiliated with miniOrange?
No. This site is not affiliated with, endorsed by, or sponsored by miniOrange. miniOrange is a trademark of its owner, named here only to describe what this tool is and is not.
Open the Shopify Permission Drift Record to compare your own exports.