Shopify app permissions, decoded: what you grant when you install an inventory app
What Shopify app permissions grant: read vs write scopes, the 60-day order window, approval-only scopes, and three questions to ask before you install.
InventoryX is in development and not available today. ClearStock is the live Shopify app.
The most common misconception about installing a Shopify app: that the permission screen is a formality, because the app's listing already told you what it does, so the checkboxes that follow are boilerplate. The checkboxes are the actual contract. The listing is marketing; the scopes are what the app can do to your store, including the parts no feature tour mentions.
Read that screen properly and the decision gets simple. Shopify app permissions decompose into a short list of scopes, and for an inventory tool the whole risk question is one axis: does this app only look, or does it change things? This article decodes the scopes inventory apps actually request, shows where to see what an installed app holds, and gives you a three-question check to run before any install.
What a scope is, in one paragraph
Access scopes control which store data an app can read and write (Shopify's API access scopes documentation, accessed November 2026). The developer declares the scopes the app wants; you approve them at install. Three mechanics matter to merchants:
- Write implies read. Any scope that lets an app change a resource also lets it read that resource. There's no "write inventory but can't see inventory."
- Granted can differ from declared. Some scopes are optional and get granted separately after install, so what an app actually holds may not match its configuration. Declaring a scope isn't the same as having it.
- Some scopes need Shopify's own approval. An app can't even request certain sensitive scopes until Shopify has vetted the use case — more on those below.
The scopes an inventory app will ask for
Most inventory and reorder tools draw from this set. The table reads each one as a merchant would.
| Scope | What it actually grants | When it's justified | The question to ask |
|---|---|---|---|
read_products |
See products, variants, collections | Universal for inventory tools | Nothing — this is table stakes |
write_products |
Change product and variant data | Only if the tool manages catalog fields | Why does a buying tool edit my listings? |
read_inventory |
See stock levels per location | Universal | Nothing |
write_inventory |
Change stock quantities | Only for receiving, counts, or sync tools | What's the rollback when a bulk edit goes wrong? |
read_locations |
See your locations | Universal for multi-location stores | Nothing |
read_orders |
See orders from the last 60 days | Velocity and demand math needs it | Nothing — but note the window |
read_all_orders |
Orders older than 60 days | Long-history forecasting | Did Shopify approve this app for it? |
write_draft_orders |
Create draft orders | Rarely justified for inventory | Could it create orders nobody asked for? |
Two rows deserve their own sentences. The order window: read_orders covers orders created in the last 60 days by default, and read_all_orders extends that to full history — but despite its name it grants no write access on its own, and for most third-party apps it requires Shopify's approval before the app can request it. So a forecasting app with 90-day velocity windows needs it; a simple low-stock alerter doesn't.
And write_inventory is the scope that separates tool categories. A read-only analyzer — reports, alerts, reorder suggestions — has no honest use for it. A receiving or count tool legitimately needs it, because receiving a PO is writing stock. The scope isn't a red flag by itself; it's a flag that the questions change.
Where you actually see this as a merchant
Shopify surfaces permissions in two places. First, every App Store listing carries a "Data access" panel — "This app needs access to the following data to work on your store" — with a plain-language summary below the technical scopes. It's worth reading on any app before installing. As a live example as of November 2026: Stockroom, a purchasing suite, declares that it edits products, orders, and inventory shipments, transfers, locations, and purchase orders — exactly what a write-heavy purchasing tool should hold, and exactly what a read-only reporting tool should not.
Second, after install, the app's page under Settings → Apps and sales channels in your admin shows its access, and uninstalling the app revokes the scopes. The exit exists; it's just on you to use it.
One more layer runs underneath all of this: protected customer data — names, emails, addresses — is blocked from apps by default and released only after Shopify reviews the app's declared use. An inventory tool that asks for customer contact data should trigger the same skepticism as one asking for your theme files.
Read-only vs write: the risk in concrete terms
It's worth being precise about what can go wrong in each world, because the asymmetry is the whole decision.
A read-only app cannot change a quantity, publish a product, or create an order. Its worst case is a wrong number on its own screen: a bad velocity calculation, a misleading alert. Annoying, not dangerous — Shopify's numbers remain untouched.
A write-enabled app can move your storefront's truth. A buggy bulk quantity edit can zero out a category at 6:40 p.m. on a promo weekend. A mistaken inventory transfer can strand 40 units on a location that doesn't sell them. None of this means write access is bad — receiving, counting, and transfers are real operations — but it means a write-enabled tool needs three things its read-only cousins don't: a named owner inside your team, a habit of checking Shopify's own adjustment history after bulk actions, and a rollback understanding with the vendor before, not after, the first incident.
The three-question pre-install check
Run this before approving any inventory app. It takes ten minutes and most apps survive it — the ones that don't were going to cost you a weekend later.
- List every write scope and name what breaks if it's buggy. If you can't answer for one of them, email the developer and ask why it's needed. "We might need it later" is a reason to uninstall-then-reinstall, not to grant on day one.
- Which requested scope touches the storefront?
write_inventoryandwrite_productschange what customers see. Those get the owner, the adjustment-history check, and a trial-period policy: does the app's free plan or trial let you observe behavior before committing your catalog? - What's the exit? Uninstall revokes scopes — confirm you know where the uninstall lives, and ask the vendor what happens to your data on the way out. An app that can't answer that question crisply has told you something.
The same skepticism applies to the marketing layer around permissions: an "AI-powered" inventory claim is a claim about methods, not about access, and the questions to ask any AI inventory tool are worth running alongside the scope check — they overlap more than vendors suggest.
Scope approval is not a quality stamp
When Shopify approves an app for a restricted scope — read_all_orders, read_users, Shopify Payments data — that approval says the use case is legitimate, not that the software is good or the forecasts are honest. Vetting quality stays your job: read the recent reviews with an eye for operations like yours, and test on your own data before trusting suggestions that move real money. The verified comparison of inventory apps is the starting grid for that evaluation.
Where staff permissions end and app permissions begin
One boundary to keep straight, because merchants conflate them constantly: staff permissions govern what a human can do in the admin — who can edit products, who can see costs. App permissions govern what software can do through the API. They're separate systems with separate screens, and granting an app broad scopes never substitutes for locking down a seasonal employee's login. The staff-permissions guide owns that side of the fence.
Common questions
Are Shopify apps safe to install? Safe is a spectrum you control. Read the listing's data-access panel, match scopes to the job, and prefer read-only tools for reporting jobs. Shopify vets some sensitive scopes itself and blocks protected customer data by default, but quality varies app by app — recent reviews and a trial on your own data are the real safety check.
What does "read-only" access actually mean for an inventory app? The app can see products, stock levels, locations, and recent orders, and can build reports and alerts from them, but cannot change a quantity, edit a listing, or create an order. Worst case is a wrong number on its own dashboard; your store's data stays untouched. Receiving and count tools legitimately need write access — reporting tools don't.
Why does an app need access to my orders? Sales history is the raw material for velocity and reorder math, so inventory tools read orders. By default that read covers orders from the last 60 days; full history requires the read_all_orders scope, which most third-party apps can only get with Shopify's approval of their use case. A simple alerter needs the window; a long-history forecaster needs the approval.
Can I see and change an app's permissions after installing? You can see what the app holds on its page under Settings → Apps and sales channels, and uninstalling revokes its access entirely. Granular scope editing after the fact is limited — the practical control is install, observe behavior in a trial, and uninstall if the access doesn't match the promised job.
Do apps share my data with other apps or services? Not through Shopify's scope system — each app's access is its own. But an app's privacy policy governs what it does with data it legitimately reads, so the data-access panel and the privacy policy are two different checks. An inventory tool forwarding your catalog to a third-party analytics service would be a policy answer, not a permissions answer.
Next step
Before your next install, open the listing and read the data-access panel against the three-question check above — write scopes named, storefront touchpoints identified, exit confirmed. Then, if you're shortlisting inventory tools, the honest comparison of the best Shopify inventory apps includes what each one asks for and why, which is half the scope audit already done for you.