← Blog

Every Shopify Store Shows You Its Whole Tech Stack. Almost Nobody Looks.

1Match·July 11, 2026

Every live Shopify store exposes its own tech stack in files anyone can open in a browser: /products.json reveals its catalog and CDN structure, /robots.txt carries Shopify-only fingerprints, and the page source lists the script tag for every app it runs. No login, no scraper, no paid tool required, just two minutes and a browser tab.

Why merchants actually want to know this

You see a competitor's store convert better than yours and want to know what they're running. An agency tells you a feature needs custom development and you want to check if an app already does it. You're picking a review app, a size guide, a virtual try-on widget, and want to see which one the stores you admire actually chose, not which one has the best marketing page. All three are the same question: what apps power this store?

You don't need a developer or a paid database to answer it. Shopify's own architecture makes stores unusually easy to inspect, more than a custom-built site ever would be, because so much of the storefront is served from predictable, public paths.

The products.json trick

Allbirds public products.json endpoint showing catalog data and cdn.shopify.com image URLs

Add /products.json to the end of any Shopify store's homepage URL and, unless the merchant has deliberately blocked it, you get the store's full catalog back as raw JSON: titles, prices, variants, and image URLs. Open allbirds.com/products.json and every image path resolves through cdn.shopify.com, confirming the platform in one line, along with real stock, pricing and variant data most competitors never publish anywhere else.

This endpoint exists because Shopify storefronts are built to be machine-readable by design, for search engines, sales channels and apps. It's not a leak or a bug. It's the same data your own store already exposes to anyone who asks.

robots.txt and sitemap fingerprints

Allbirds robots.txt file with Shopify-specific Disallow rules like preview_theme_id and .well-known/shopify/monorail

Open /robots.txt on any store and you'll either confirm it's Shopify or rule it out immediately. Shopify stores share the same boilerplate rules across virtually every merchant: Disallow: /preview_theme_id*, Disallow: /.well-known/shopify/monorail, Disallow: /services/login_with_shop. No other platform writes rules like these, because they map to Shopify-specific internal routes.

The same file usually ends with a Sitemap: line pointing at /sitemap.xml. Open that and you'll find dated sub-sitemaps for products, collections and blog posts, another pattern that's near-identical across every Shopify store because it's generated by the platform, not the merchant.

Spotting the theme

View the page source (right-click, "View Page Source") and search for cdn.shopify.com/s/files. The path structure after it usually includes the theme's asset folder, and many themes leave their name in an HTML comment near the top of the file or in a data-theme attribute. If you already know a handful of popular theme names, Dawn, Impulse, Prestige, Broadcast, a quick search for any of them in the source often confirms it directly.

Free tools that do all of this for you

You don't have to read raw JSON or regex through robots.txt every time. A few free browser extensions automate the whole process:

  • Koala Inspector — one click on any Shopify store lists its theme, top apps, and page load speed.
  • Shopify Inspector — similar to Koala, with a cleaner breakdown of installed apps by category.
  • BuiltWith — a browser extension and web database that fingerprints the full tech stack of any site, Shopify or not, including analytics, ads pixels and CDN.
  • StoreLeads — built specifically for Shopify and Shopify Plus stores, useful if you want to research dozens of competitors at once rather than one at a time.

All four read the same public signals covered above; they just do it automatically and present it as a clean list instead of raw source code.

Spotting a specific app, not just "an app exists"

Detector extensions are fast but sometimes miss niche or newer apps that aren't in their database yet. When you want to confirm one specific tool, go back to the page source and search (Ctrl+F) for the vendor's script domain. A review app usually loads a script from its own subdomain; a chat widget does the same; a virtual try-on app does too. For 1Match, that's a script tag pointing to 1match.app, even on stores where the on-page button carries the merchant's own branding and gives no visual hint the app is running underneath.

This is the most reliable way to answer a genuinely useful question: does a specific competitor already run a virtual try-on widget, a size guide, or a particular review platform? The badge on the page tells you nothing. The script tag tells you everything.

What to actually do with what you find

Don't copy a competitor's stack blindly, an app that works for a 500-SKU streetwear brand may be the wrong fit for a 20-SKU boutique. But patterns across several stores in your niche are a real signal. If the fastest-growing apparel brands on Shopify keep showing the same two or three review apps, that's worth taking seriously; see our breakdown of what the best apparel brands on Shopify actually do differently. If you're rebuilding your storefront and want a starting point on themes, we compared the ones fashion brands pick most in our guide to the best Shopify theme for apparel.

And once you've mapped what's already installed on your own store, or found the gap a competitor filled that you haven't, our running list of free Shopify apps worth installing is a fast way to fill it without committing to a paid tool first. If the gap you find is fit and returns, that's exactly what 1Match's virtual try-on solves: shoppers see clothing on themselves before buying, and merchants cut returns 25-40% without asking customers to guess their size from a chart.

Frequently asked questions

What is a Shopify app detector?

A tool or technique that reads a store's public files, page source, products.json, robots.txt, to tell you which apps, theme and tools it runs. Some are free browser extensions, some are paid databases like BuiltWith or StoreLeads.

Is it legal to check what apps a Shopify store is using?

Yes. Everything here reads public files the store already serves to any visitor or search engine. No login, no bypassing protection, no scraping behind a paywall.

What's the fastest way to see a Shopify store's apps?

Install a free extension like Koala Inspector or Shopify Inspector. Open the store, click the extension, and it lists the theme and most installed apps in seconds.

Can I tell what theme a Shopify store is using?

Usually yes. Search the page source for "cdn.shopify.com/s/files" or the theme name directly. Detector extensions surface it automatically too.

How do I know if a specific app is installed on a store?

Search the page source for the vendor's script domain. For 1Match, that's a script tag loading from 1match.app, even when the on-page button carries the merchant's own branding.

Ready to cut your returns?

Add virtual try-on to your store in 10 minutes. Free to start.

Install on Shopify
Every Shopify Store Shows You Its Whole Tech Stack. Almost Nobody Looks. | 1Match