One approval, on the platform’s own screen.

You register one app with Shopify, once. It connects every store you look after.

The store’s administrator opens it and approves on Shopify’s own screen.

From then on, the theme is read on every pulse, walk and sweep.

Nothing is installed to start.

The administrator signs in to their own site and presses Approve on the application-password screen. That password works on the API only.

To read theme files: four read-only routes, nothing it sends anywhere on its own, no update channel.