Extend your store safely with reviewed apps.

Prebit App Store lets you add new capabilities to your store without risking storefront stability or security. Every app runs in an isolated, permissioned environment and passes security review before publication.

Start free trialSee how it works
Status: Live MarketplaceSecurity: Sandboxed RuntimeAuth: OAuth + Scoped PKCEWebhooks: HMAC Signed

App Store — At a Glance

Why merchants like it
  • Zero Storefront Speed Degradation
  • Transparent App Security
Built for developers
  • Typed REST APIs & SDKs
  • Marketplace Distribution
App Store is a fit if you are...
  • merchants looking to extend their store functionality with verified, secure apps
  • developers wanting to build, monetize, and publish commerce apps on Prebit
  • brands that need specialized D2C integrations without breaking theme performance

What is App Store?

What is Prebit App Store?

Prebit App Store is the official marketplace for extending your store's capabilities. Whether you need specialized marketing tools, custom fulfillment integrations, or loyalty programs, apps install with clear permission scopes and run safely.

Built-in security & performance protection

Unlike platforms where third-party apps often inject bloated JavaScript that slows down your store or poses security risks, Prebit requires all apps to operate within a sandboxed runtime environment.

Developer & Partner Ecosystem

Developers can build custom apps using Prebit's typed REST APIs, webhooks, and CLI tools, with complete security validation before publishing to merchants.

Why Prebit built App Store

Sandboxed Performance Protection

To provide a secure, curated marketplace for merchants to add functionality without site degradation.

Developer & Partner Ecosystem

To create a thriving ecosystem for developers and partners while protecting store performance.

Scoped OAuth & Explicit Security

To enforce clear OAuth permission scopes so merchants know exactly what data apps can access.

Key features

Sandboxed App Runtime

Apps execute within secure containerized web workers and edge functions, isolating third-party code from core store data.

Merchant impact: Prevents rogue scripts from slowing down checkout or harvesting customer data without permission.

Developer impact: Clear execution guarantees and standardized API contracts for predictable app behavior.

Example: An analytics app runs in its own worker thread, recording events without delaying storefront page render.

Explicit OAuth Permission Scopes

During app installation, merchants see a transparent breakdown of requested read and write permissions.

Merchant impact: Full visibility and control over what store data each app can access.

Developer impact: Granular scope definitions simplify security reviews and app submission approval.

Example: A loyalty app requests read-only access to Customer and Order history, explicitly disallowing product mutation.

Architecture

Commerce Engine
Typed API + Events
Framework Layer (Boron / Krypton)
Frontend Surface
Merchant Outcomes

Every layer feeds the next: App Store sits inside this chain rather than bypassing Commerce Engine's data contracts.

HMAC Signed Webhooks

Every event payload sent to partner apps is signed with SHA-256 HMAC headers to guarantee message authenticity.

Theme Block Injectors

Apps inject UI widgets using structured .bit Theme Engine blocks rather than arbitrary script tags.

Merchant benefits

Zero Storefront Speed Degradation

Sandboxed runtime guarantees third-party apps cannot block page rendering or degrade Core Web Vitals.

Transparent App Security

Every published app is verified by Prebit security engineers before entering the App Store.

Developer benefits

Typed REST APIs & SDKs

Build apps quickly using Prebit's TypeScript SDK, CLI scaffolding, and event webhooks.

Marketplace Distribution

Publish apps directly to thousands of active D2C merchants across India on the Prebit platform.

Real use cases

D2C Brand Manager

Needs automated WhatsApp order notifications and tracking updates.

Outcome: Installs a verified messaging app in 1 click with scoped order notifications.

App Developer

Wants to build a custom inventory forecasting plugin for Prebit merchants.

Outcome: Builds against Commerce Engine APIs and publishes to the App Store using CLI tools.

Performance

Isolated Execution

App scripts do not run in the main DOM thread, preserving sub-100ms TTFB on Boron storefronts.

SEO and AI-search advantages

Clean Head Section

No third-party tracking scripts bloated into the document head, maintaining 100/100 Lighthouse SEO scores.

Comparison

How App Store compares

A direct, factual read on where each platform is strong, and where Prebit takes a different approach.

PlatformBest forWhere Prebit differs
ShopifyMerchants who want a mature ecosystem and are comfortable assembling apps around the core product.Prebit provides an isolated, permissioned extension runtime so third-party apps can never inject malicious scripts or degrade storefront loading performance.
WooCommerceTeams already invested in WordPress that can manage hosting, plugins, and patching themselves.Prebit provides an isolated, permissioned extension runtime so third-party apps can never inject malicious scripts or degrade storefront loading performance.
DukaanFast setup for lightweight catalogs and social-first merchants who need simple operations.Prebit provides an isolated, permissioned extension runtime so third-party apps can never inject malicious scripts or degrade storefront loading performance.
WixVisual-first website editing where commerce complexity is still relatively low.Prebit provides an isolated, permissioned extension runtime so third-party apps can never inject malicious scripts or degrade storefront loading performance.
SquarespaceContent-led brands that prioritize polished publishing and lighter transactional workflows.Prebit provides an isolated, permissioned extension runtime so third-party apps can never inject malicious scripts or degrade storefront loading performance.
BigCommerceMid-market catalog and B2B scenarios that need established enterprise controls.Prebit provides an isolated, permissioned extension runtime so third-party apps can never inject malicious scripts or degrade storefront loading performance.
MagentoEnterprises with large implementation budgets and in-house platform engineering teams.Prebit provides an isolated, permissioned extension runtime so third-party apps can never inject malicious scripts or degrade storefront loading performance.

Directional and factual. Validate against your own catalog complexity, channel strategy, and budget before deciding.

FAQs

Frequently asked questions about App Store

Plain answers to what merchants, agencies, and developers actually ask.

App Store is a dedicated Prebit capability focused on sandboxed runtime environment with oauth authorization-code + pkce & scoped api access. It is positioned as part of the wider Prebit platform rather than a disconnected add-on.

App Store is best suited to merchants looking to extend their store functionality with verified, secure apps and developers wanting to build, monetize, and publish commerce apps on Prebit.

App Store relies on Commerce Engine contracts for product, cart, order, customer, or event state so teams are not duplicating business logic across separate tools.

Yes. Boron is Prebit's Next.js commerce framework, and this feature is designed to surface cleanly inside Boron storefront implementations.

Krypton is Prebit's mobile commerce framework. Where mobile parity matters, this feature is designed to share contracts with the same storefront APIs and platform services.

Yes. The feature set is designed so agencies can standardize workflows, theme patterns, or integration playbooks instead of rebuilding each project from scratch.

Yes. Prebit's direction is API-first and framework-aware, so custom logic can be added through typed interfaces, event flows, and deployment pipelines instead of fragile UI workarounds.

Usually yes, although the mechanism depends on the feature. Prebit's architecture aims to reduce plugin sprawl, tighten data contracts, and keep storefront rendering paths cleaner.

Start with the workflow you already run today, map the manual steps and integration points, then validate how this feature reduces handoffs, errors, or duplicated implementation effort.

It is part of the Prebit ecosystem, but the feature pages are intentionally written as independent product narratives so merchants, agencies, and developers can evaluate each capability on its own merits.

A third-party app usually means a second data model, a second permissions surface, and a second thing that can silently drift out of sync. App Store reads and writes through the same Commerce Engine contracts as the rest of Prebit, so there is one source of truth instead of an app-plus-platform reconciliation problem.

App Store is modeled at the platform layer, not inside a specific theme or frontend. Switching themes, or moving a storefront from one framework surface to another, does not require re-entering or migrating the underlying data.

No for the core merchant workflow, which is designed to work out of the box. Yes if a team wants deeper customization, custom UI, or integration with an external system, which is why the developer-facing contracts exist alongside the merchant UI.

The goal is for platform-level features to add negligible overhead compared to stitching together equivalent third-party scripts or apps, since the logic runs closer to the same data layer instead of making extra round trips.

It is included as part of the relevant Prebit plan rather than sold as a separate paid add-on, though final packaging can vary by plan tier — check current plan details before assuming feature-by-feature pricing.

Prebit maintains the underlying platform logic and ships improvements centrally. Merchants and developers configure and extend it, rather than owning the core implementation the way they would with a self-hosted plugin.

Generally yes. Most Prebit capabilities are additive rather than mandatory, so a team can adopt them when the workflow actually calls for it instead of being forced into every surface on day one.

The same contracts that make a single store work cleanly are what let multi-store and enterprise operators standardize the same workflow across several storefronts instead of re-implementing it per store.

Start a trial, look at the relevant dashboard surface directly, and compare it against whatever manual process or third-party tool currently handles the same job — the difference is usually clearest in a real side-by-side.

Specific and technical, by design — this page describes real architecture and real behavior, not vague marketing claims, so a merchant, agency, or developer can evaluate it accurately.

Explore More

Ready to try App Store?

Start free. No credit card required. Explore the rest of the Prebit platform once you're in.

Start free trialRead Commerce Engine

← All Prebit features