Is Shopify App Detector by Shopify Spy safe?

Clean risk

Shopify App Detector sends the active tab's site origin to api.shopify-spy.com to look up which Shopify apps that store uses.

When you open the extension's popup on a Shopify store, it reads the active tab's URL and sends just the origin (scheme and host, not the full path or query) to the vendor's backend at api.shopify-spy.com. The server returns the list of Shopify apps detected on that store, which the popup then displays. The request fires only on a user click and only on tabs identified as Shopify stores.

Extposev1.0.0Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

api.shopify-spy.com
Updated 17 September 2026ldkmnajbkhefhocmhpljemogcajpiafn