Vigil
A security scan for a Shopify store. It tells you which file or app put a script on the storefront, and you can run that scan from Claude, ChatGPT, or Cursor.
0 people are on the waitlist. There is no install link until Shopify approves the app.
What the first version checks
Theme and app embeds
Vigil reads the published theme and the app embeds on the storefront. Each external script is tied to a file or an app name.
Leaked keys
It flags tokens and secret-looking strings that shipped in theme code or an embed. The finding names the file.
Change history
Vigil keeps the store events it can see, past the 250 Shopify shows in admin. It does not read staff accounts.
A switch you can flip
When a script looks wrong, a person can turn it off on the storefront. Scripts hard-coded in the theme head load first, so Vigil flags those and points to the line to remove. The first version does not auto-delete apps.
Features
| Feature | What it does | Status |
|---|---|---|
| Scan on open | Opening Vigil scans the published theme, app embeds, app blocks, and external frames. | In testing |
| Live storefront scan | Also reads the rendered page, so scripts added at runtime show up. A password-locked store needs its password saved in Vigil. | In testing |
| Source of each script | Names the theme file and line, or the app, behind every external script. | In testing |
| Leaked keys | Flags secret-looking strings without showing the secret. | In testing |
| Turn off and Undo | Blocks scripts that load after the Vigil blocker embed: body scripts, tag managers, and app injections. Scripts hard-coded in the theme head are flagged with the line to remove. Undo lifts a block. No app is uninstalled. | In testing |
| Agency kill switch | Turns one host off across the stores on one account. | In testing |
| Theme change alerts | Records when the published theme changes, so you know to scan again. | In testing |
| MCP tools | scan_store, warm_live_page, block_host, unblock_host, and list_blocked_hosts, with a per-store agent token. | In testing |
| Public MCP access | Connect from Claude, ChatGPT, or Cursor for every store. | Planned |
| Install from the App Store | Available after Shopify approves the listing. | Planned |
Run it from an agent
The same scan is available over MCP with a per-store token while Vigil is in testing. An agent asks Vigil to scan the store and gets the findings back as structured data: script, source, and why it was flagged. The merchant still decides what to turn off.
Version 1 does not read customer records or order contents. Vigil is in beta on development stores. It is not on the App Store yet.
Where the app lives
This page on appnary.com is the public page. The screen inside Shopify admin is served by the Appnary control panel. That address processes the install, the scan, and the agent tool. It is not an install link, and this site will not show one until Shopify approves the listing.
Waitlist
We keep this list until the app is built and Shopify has approved it. Then we invite people from the list.