Yes. Merchants can monitor third-party app API activity using Shopify Anomaly Detection solution by miniOrange.
A third-party app may have legitimate access to products, customers, orders, themes, or webhooks. The risk appears when it uses unexpected operations, accesses the store from a new location, generates an unusual volume of requests, or holds permissions that it does not actively need.
Shopify Anomaly Detection helps merchants to:
- Record API activity performed by installed apps and integrations.
- Identify which app performed each operation, including mutations and high-risk actions.
- Compare granted API scopes with the app’s actual behaviour.
- Detect unusual patterns such as new IP addresses, abnormal access times, or request spikes.
- Assign a composite risk score to suspicious activity.
Monitoring should be combined with regular app access reviews. Remove unused applications, revoke unnecessary scopes, and investigate apps whose behaviour changes unexpectedly.
For further assistance with monitoring third-party app API activity in Shopify get in touch with us today.
