https://appnary.com
Appnary develops utility and security applications for Shopify merchants, led by Vigil, an automated storefront script scanner with AI agent integrations.
About https://appnary.com
Appnary builds targeted software utilities for Shopify store owners, focusing on storefront maintenance, security auditing, and data operations without enterprise complexity. Its central product under active development is Vigil, a diagnostic security scanner engineered to inspect published Shopify themes, embedded applications, and live storefront assets. Rather than requiring store owners to sift through complex theme templates manually, the tool traces every external script back to its originating app or theme template line, identifying orphaned tracking tags, unauthorized third-party embeds, and credential leaks.
A key architectural feature of Vigil is its native compatibility with the Model Context Protocol (MCP). Through per-store authentication tokens, merchants and technical teams can connect AI coding assistants like Claude, Cursor, or ChatGPT directly to their Shopify environment. These AI agents can call diagnostic tools such as store scanning, live page warming, and host filtering to retrieve structured vulnerability findings. Instead of granting autonomous write permissions, the platform leaves remediation decisions to the merchant, providing clear line references so administrators can disable rogue assets safely without breaking critical checkout steps.
Operated under parent entity Binary Labs LLC, Appnary is expanding its ecosystem beyond security with planned utilities like Sync, built for catalog and order synchronization across multiple storefronts, and Backup for store asset protection. The suite is engineered specifically for independent e-commerce operators who need direct oversight of storefront performance and theme code hygiene without navigating bloated multi-tiered software packages.
Features
- Event audit tracking retains store modification events beyond the default 250 records displayed by Shopify
- Storefront script mapping ties external scripts to specific theme files, app embeds, or theme layout lines
- Credential detection scans theme code and app embeds for exposed API keys and secret tokens without printing values
- MCP agent protocol lets tools like Claude, Cursor, and ChatGPT run remote store scans using per-store tokens
Use Cases
- Identifying and isolating leftover script code abandoned by uninstalled Shopify apps in published theme files
- Auditing storefront theme assets for exposed API tokens or sensitive credentials prior to store launches
- Hooking AI assistants into development stores over MCP to inspect script configurations during development
- Identifying and isolating leftover script code abandoned by uninstalled Shopify apps in published theme files
Verified facts
Checked by the StackLedge team.
FAQ
Does Vigil access protected customer records or checkout data?
Version 1 is specifically designed not to read or store sensitive customer profiles or order contents. It confines scanning exclusively to public storefront themes, app blocks, and script embeds to prevent handling regulated customer data during security checks.
Can connected AI agents automatically delete Shopify applications?
No. While connected AI agents can discover vulnerabilities and trigger script host blocks through MCP tools, they cannot uninstall applications. Script blocking applies to runtime embeds, while hardcoded header scripts must be removed manually by the store administrator.
How does Vigil handle Shopify privacy webhooks?
The application complies with standard Shopify customer privacy webhooks. Because Vigil avoids collecting customer profiles, data request and customer deletion webhooks require no exports, while store-level uninstall webhooks erase that store's inspection logs completely.
Can merchants install Vigil on production Shopify stores immediately?
Vigil is currently restricted to testing on development environments with private store tokens. Public storefront installation remains closed under an active waitlist until the software passes official Shopify App Store review.
Similar tools
More in SaaS
Basedash
AI-native business intelligence — build charts, dashboards and reports in seconds from all your data, no SQL required, and share them with anyone via a live lin
Edgemetry
Privacy-first, self-hosted web analytics you run on Cloudflare's free tier. One Worker, one D1 database, no cookies, no consent banner.
Quick Image Converter
Quick Image Converter converts, compresses, resizes, and batch-processes images directly in a browser without registration
Discussion (0)
Log in to join the discussion.
No comments yet.