App Permissions and Scopes

Last updated: July 17, 2026.

Cart Marshal requests the 14 Shopify access scopes below. This list matches the production app configuration.

Requested scopes

• read_discounts and write_discounts: read, create, update, publish, unpublish, and remove discount rules.
• read_payment_customizations and write_payment_customizations: read and manage rules that hide, reorder, or rename payment methods.
• read_delivery_customizations and write_delivery_customizations: read and manage rules that hide, reorder, or rename delivery methods.
• read_cart_transforms and write_cart_transforms: read and manage cart transforms used for Gift with Purchase auto-add behavior.
• read_validations and write_validations: read and manage checkout validation rules.
• read_customers: load customer segments used in rule targeting. Customer-related checkout conditions are evaluated at runtime by Shopify Functions.
• read_products: load product tags and support product, variant, collection, tag, SKU, and sale-status targeting in rule builders.
• read_shipping: load delivery profiles and active delivery method names for rule configuration.
• read_markets: load active Shopify Markets and their country context for rule configuration.

Cart Marshal does not request write access for customers, products, shipping settings, or markets.

Protected customer data

Cart Marshal's Shopify Functions can read customer-related checkout fields at runtime when a rule requires them, including customer email, customer ID, order count, customer tag matching, B2B company signals, delivery country, address lines, and ZIP/postal code for PO Box or ZIP-based rules. Runtime values are used to evaluate the checkout and are not copied into Cart Marshal's app database as customer profiles.

Scripts analyzer

Scripts analyzer is manual. It does not request a Shopify Scripts scope, does not read Scripts from Shopify, and does not publish replacement rules automatically.