Fetch the public HTML.
The scanner sends a single GET request to the storefront homepage, the same request your browser sends when you visit. No login, no API token, no scraping of admin pages.
Free Shopify App Detector · No signup, no API key
Shopify App Detector
Paste any Shopify storefront URL. See every app, pixel, and theme embed installed on the store, with the exact piece of evidence pulled from the public HTML. Runs in your browser, in seconds.
Here is what a real scan returns.
A frozen result from allbirds.com. Every detected app is paired with the exact signal that triggered the match, so you can verify it yourself in the browser’s view-source view.
-
Email & SMSKlaviyo
static.klaviyo.com/onsite/js/klaviyo.js?company_id=… -
SubscriptionsRecharge
cdn.shopify.com/…/recharge-checkout-and-portal-… -
ReviewsJudge.me
cdn.judge.me/widget_preloader.js -
AnalyticsGoogle Tag Manager
googletagmanager.com/gtm.js?id=GTM-XXXXXX -
AdvertisingMeta Pixel
connect.facebook.net/en_US/fbevents.js -
Customer SupportShopify Inbox
cdn.shopify.com/extensions/…/inbox_default/inbox.js
Run your own scan above to see the same evidence chips for any storefront.
What the App Detector checks.
The scanner matches the public homepage HTML against 97 known fingerprints. Categories it covers:
- Apps from the Shopify App Store. Reviews, subscriptions, upsell, bundles, loyalty, returns, page builders, search.
- Email and SMS platforms. Klaviyo, Omnisend, Postscript, Attentive, Drip, Mailchimp.
- Advertising and tracking pixels. Meta, TikTok, Pinterest, Snap, X (Twitter), Reddit, Google Ads.
- Analytics platforms. Google Analytics 4, Google Tag Manager, Triple Whale, Northbeam, Segment, Hotjar.
- Customer experience apps. Live chat, helpdesks, popups, exit intent, recently viewed, wishlist.
- Theme app embeds and code injections. Anything injected through Shopify’s theme app extensions or directly into
theme.liquid. - Page builders. Shogun, GemPages, PageFly, Zipify Pages.
- Personalization and merchandising. Rebuy, Nosto, LimeSpot, Searchspring.
How the Shopify App Detector works.
Match the fingerprints.
The returned HTML is matched against 97 app signatures. A signature is one or more concrete signals: a script URL, a known DOM selector, a meta tag, a Shopify theme app embed, a network call host.
Render with evidence.
Every match is rendered with the literal string from the HTML that triggered it. If the evidence is wrong, the match is wrong, and you can verify it in the browser’s view-source view in seconds.
When to run an App Detector scan.
Competitor research.
Pick the three stores winning in your category. Scan each one. The intersection of their stacks tells you which apps are table stakes and which are differentiators worth testing on your own store.
Agency audits.
Before onboarding a new client, scan their live storefront. You arrive at the first call with the complete app list, the pixels firing, and the theme embeds already mapped. The discovery call becomes a conversation about strategy, not inventory.
Acquisition diligence.
Acquiring a Shopify brand? The app stack drives monthly cost, integration risk, and migration complexity. A free scan replaces an hour of due diligence with a verifiable evidence list.
Store owners auditing themselves.
Apps accumulate. Pixels stay behind after campaigns end. Scan your own store quarterly and you have an honest inventory of what is actually firing on a real page load, separate from what your billing thinks you have installed.
What App Detector cannot see.
A public-HTML scanner is the right tool for most jobs. It is the wrong tool for a few. Here is the honest list of what stays invisible.
- Server-side and webhook-only apps. Apps that listen to Shopify webhooks or run entirely on the backend (fraud, tax, shipping rate calculators, ERP syncs) leave no fingerprint in the homepage HTML.
- Apps that load only after a consent gate. If a script is blocked behind a GDPR or CCPA consent banner, the first page load does not contain it. You would need to accept cookies and re-scan to see those signals.
- Shopify Plus private apps. Custom apps built for a single merchant do not appear in any public registry and have no public fingerprint.
- Apps that fire only on specific routes. Anything that only loads on cart, checkout, or a specific product page is not in the homepage scan. The current scanner reads the homepage only.
- Password-protected stores. A protected store returns a Shopify password screen, not the storefront, so there is nothing to fingerprint.
Frequently asked questions.
Is the Shopify App Detector free?
Yes. Every scan is free, with no daily limit, no signup, and no API key. The tool reads only the public HTML that any browser can already see.
Do I need a Shopify account to use it?
No. You do not need to be a Shopify merchant, partner, or affiliate. Paste any storefront URL and the scan returns a result in seconds.
Can the store owner see that I scanned their store?
The scan is a single GET request to the storefront homepage, identical to what a normal browser sends. The store owner sees one anonymous visit in their analytics, the same as any other visitor.
Why did an app I expected to see not show up?
App Detector only sees apps that leave a fingerprint in the homepage HTML. Apps that load after a consent gate, server-side-only apps, and Shopify Plus private apps are invisible to any public-HTML scanner.
How accurate is the app detection?
Every detected app comes with the exact piece of evidence that triggered the match: a script URL, a meta tag, a known network call. If the evidence is visible in the HTML, the match is real.
Can I scan a password-protected or staging store?
No. Password-protected stores return a Shopify login screen instead of the storefront, so there is nothing to scan. Use the tool on a live, publicly accessible storefront.
The rest of the forensic kit.
Five more free Shopify tools, same evidence-first approach.