Shopify Public Catalog Auditor

Permission-first catalog QA. Authorized merchant use only. See Shopify terms: https://www.shopify.com/legal/api-terms

Purpose

For the operator's own store or a store with express permission, audit public product titles, product/variant IDs, options, source-exposed SKU, price, currency, compare-at price, and image links. No price-change alerts, stock inference, image files, personal profiles, login, proxy, or CAPTCHA.

Source modes

• mock_shop: Shopify's official fictional test catalogs on *.mock.shop, without a token.
• storefront_api: Shopify official Storefront API 2026-07 with a merchant-provided scoped token.
• public_json: permitted store's /products.json best-effort only; robots.txt and access restrictions are checked. Never a guaranteed complete export.

User input

storeUrl (HTTPS origin), sourceMode, maxProducts (1-250), maxPages (1-30), authorizationConfirmed (required for live stores), storefrontToken (secret input for the Storefront API).

Legal and operational restrictions

Shopify API terms updated on October 7, 2026 prohibit systematic or unauthorized scraping and limit data use. Live-store operators must verify current Shopify terms, merchant terms, and authorization before running. Checkbox attestation is not legal proof; robots.txt is a technical policy check, not a legal license. Denied, rate-limited, and restricted shops produce a coverage/error summary; no access-bypass method is used.

Example demo

Use storeUrl https://candles.mock.shop, sourceMode mock_shop, maxProducts 4, maxPages 2.

Dataset

Each variant row contains recordType, storeUrl, sourceUrl, catalogUrl, productId, variantId, title, variantTitle, options, optionSummary, sku (when exposed), price, currency (when exposed), compareAtPrice, imageUrl (link only), warnings, warningCount, and retrievedAt. No image binaries are downloaded.

The final audit_summary row reports status (complete, partial, blocked), coverageStatus, product/variant counts, pages, bytes, duration, errors, and limitations. GraphQL can expose a maximum of 50 variants per product in the initial page; further variants are flagged as a partial result, not silently omitted.

Tests

Official Shopify demo catalogs at candles.mock.shop and coffee.mock.shop were queried: 4 products and 24 variants each. Product caps correctly gave partial coverage. An offline simulated 403 response was blocked with zero products. Run npm test or npm run probe.

Pricing

Proposed $0.002 per successfully delivered product, not per variant. Apify actor-start event may add $0.00005 per run. Billing must be configured and tested before activation. See PRICING.md.

References: https://shopify.dev/docs/storefronts/headless/mock-shop ; https://shopify.dev/docs/api/storefront/2026-07 ; https://docs.apify.com/actors/publishing/monetize/pay-per-event

Source and scope warning

Shopify's API terms may prohibit systematic automated extraction even with a merchant's permission; merchant consent and robots.txt alone do not override platform restrictions. Obtain appropriate Shopify authorization for any audit that would otherwise be restricted. This Actor is not a generalized scrape-any-Shopify-store product index. The synthetic demo mode is available without merchant credentials; real-shop usage remains permission and terms constrained.

A successful end-of-page indication proves completeness only within the published products returned by the chosen API and current credentials. Out-of-channel items, unexposed metadata, and variant pages beyond the initial supported variant connection are explicitly outside the guaranteed scope. Duplicate source products and invalid responses receive partial-coverage warnings.