Skip to content

Shopify URL

Service Name: Shopify

Service Description: Shopify is an e-commerce platform that allows individuals and businesses to create online stores to sell products. It provides comprehensive tools for managing inventory, processing payments, and tracking orders.

Service Address: https://www.shopify.com/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to a specific Shopify store's admin interface and API endpoints.

Secret Revokement URL: https://admin.shopify.com/settings/apps

Secret Example: mystore.myshopify.com

Suspicious Activity Investigation Instructions:

  • Check the Shopify admin panel for unauthorized app installations or API access
  • Review recent orders and transactions for suspicious activity
  • Check for changes in user permissions or new staff accounts
  • Monitor for unusual data exports or API calls
  • Review Shopify audit logs for unauthorized access patterns

Mitigation Instructions:

  • Log in to your Shopify admin panel
  • Navigate to Settings > Apps and sales channels
  • Revoke access for any suspicious or unauthorized applications
  • Change your admin password immediately
  • Enable two-factor authentication if not already enabled
  • Review and update staff account permissions
  • Contact Shopify support to report the security incident