Shopify Script Tag Shutoff Scanner (March 2027)

On 1 March 2027 Shopify stops injecting script tags into online store storefronts, on every API version (shopify.dev changelog, 24 Aug 2026). Apps that still load that way (chat widgets, reviews, loyalty, subscriptions, pop-ups, fraud and ID checks...) will silently disappear from the store unless the merchant switches on the app's app embed in the theme editor.

Merchants can't see their script tags in the admin, and an app can only list its own tags. This Actor reads the public storefront of any Shopify store and tells you, per store:

• Which apps still load through script tags (each script URL, mapped to the app name),
• Which of them already have an app embed switched on (safe) and which don't (will stop on 1 Mar 2027),
• the theme (name, version, theme store id, vintage flag),
• whether the store still runs legacy customer accounts (deprecated by Shopify on 26 Feb 2026; the final sunset date is to be announced),
• a risk level and a plain to-do list for the merchant.

Built for Shopify agencies and freelancers (find and fix affected client stores), app vendors (see which merchants still run your old script tag) and merchants (check your own store before the date).

Input

{ "storeUrls": ["https://www.brooklinen.com", "example.myshopify.com"] }

Or give storeListUrl: a CSV/TXT file or a published Google Sheets CSV link; any column holding a domain or URL is used, one store per row.

Only the home page is read (script tags with an online-store scope load on every page; the customer-account check uses the same page and asks /account/login only when the page doesn't say). Requests are paced (about one store per second) because Shopify rate-limits bursts from one address; stores that keep refusing are reported as errors and are not charged, so you can simply run them again later.

Output

{
  "url": "https://shop.example.com",
  "isShopify": true,
  "shopDomain": "example.myshopify.com",
  "risk": "high",
  "atRiskApps": ["Recharge", "Fomo"],
  "scriptTagCount": 3,
  "scriptTags": [
    {"url": "https://config.gorgias.chat/bundle-loader/...", "host": "config.gorgias.chat", "app": "Gorgias", "hasAppEmbed": true},
    {"url": "https://static.rechargecdn.com/assets/js/widget.min.js", "host": "static.rechargecdn.com", "app": "Recharge", "hasAppEmbed": false}
  ],
  "appEmbeds": ["gorgias-chat"],
  "theme": {"name": "Dawn", "schemaName": "Dawn", "schemaVersion": "15.2.0", "themeStoreId": 887, "vintage": false},
  "customerAccounts": "legacy",
  "action": "2 app(s) load only through script tags and stop on 1 Mar 2027: Recharge, Fomo. For each: update the app, then turn on its app embed in Online Store > Themes > Customize > App embeds..."
}

Risk: high = at least one app loads only through script tags; low = script-tag apps also have an app embed (only the old copy goes away); none = no script tags; not-shopify = not a Shopify Liquid storefront (headless stores don't use script tags). The key-value store summary lists the apps most often still on script tags across your scan.

How it works

Shopify loads script tags through its asyncLoad storefront loader; app embeds load from cdn.shopify.com/extensions/.... The Actor reads both from the public HTML, maps script hosts to 80+ known apps (unknown ones are shown by domain) and checks whether the same app already ships an embed. No login, no admin access, no personal data, no contact with the store.

Pricing

Pay per Shopify store scanned. Non-Shopify sites and stores that can't be loaded are free, and the run stops at your spending limit.

Good to know

• Analytics/conversion scripts should move to web pixels, which need no merchant action; storefront features need the app embed switched on by the merchant.
• Shopify said it will reassess its merchant warning in January 2027; the 1 March 2027 date stands as published.
• App names come from a lookup table; an unknown script shows its domain so you can still identify it.

FAQ

Will my Shopify store break on March 1, 2027? Only the parts that come from apps still loading through script tags. Shopify stops injecting script tags into online store storefronts on 1 March 2027 (all API versions). Run this Actor on your store: risk: high lists the apps that will disappear; low or none means you are fine.

What replaces Shopify script tags? App embed blocks (theme app extensions), which the merchant turns on in Online Store > Themes > Customize > App embeds, and web pixels for analytics and conversion tracking. Many apps already ship an app embed: the scan shows which ones are already on.

Why can't I see script tags in my Shopify admin? Shopify doesn't list them for merchants, and an app's API access only shows its own tags. The storefront's public HTML still shows every script-tag URL, which is what this Actor reads.

Since when can apps no longer create script tags? Since 1 October 2026 the scriptTagCreate / scriptTagUpdate mutations and REST POST/PUT return errors; existing tags keep running until 1 March 2027.

Does this work for headless (Hydrogen) stores? Headless storefronts don't use script tags, so they are reported as not-shopify (nothing to fix there).

Can agencies scan many stores? Yes: paste a list of store URLs (thousands per run). The summary record ranks the apps most often still on script tags.

More tools from the same author

• Shopify Image Size Checker: every product image under the 500x500 Merchant Center minimum (31 January 2027).
• Google Merchant Center Q&A Writer: write the new question_and_answer attribute for every product, as a ready supplemental feed.
• AI Visibility Monitor: does ChatGPT, Perplexity, Claude or Gemini recommend your brand.
• PayPal Legacy Button Finder: every old PayPal Buy Now / Add to Cart button before PayPal retires them.
• SSL Root Certificate Distrust Checker: which sites, APIs and mail servers break when Mozilla removes 19 roots on 15 April 2027.
• Azure Classic CDN & Front Door Retirement Checker: hostnames and page assets still on Front Door (classic) or azureedge.net.
• Drupal Version & End-of-Life Checker: which sites run Drupal 10 (end of life 9 December 2026) or older.
• Website 2027 Breakage Audit: every 2026-2027 deadline (certificates, Shopify, PayPal, Azure, Drupal, PHP) in one report per site.

Shopify is a trademark of Shopify Inc. App names are trademarks of their owners. This Actor is independent and not affiliated with or endorsed by Shopify.