// SCAN REPORT

AdminAgent

123 tools. 60 can modify or destroy data without limits.

14 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

60 can modify or destroy data

63 read-only

123 tools total

Community server · catalogue entry verified 02/07/2026

How to control AdminAgent ↓

TOOL MAP

What AdminAgent exposes to your agents

Read (63) Write / Execute (46) Destructive / Financial (14)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous AdminAgent tools

Financial · Critical create_refund Refunds are financial transactions that reduce revenue and move money out of the business to customers. Financial · Critical capture_payment This tool moves money by finalizing a previously authorized payment, triggering an actual charge to the customer's payment method. Destructive · High cancel_bulk_operation Cancelling a bulk operation is destructive because it terminates an irreversible state change — once cancelled, a bulk operation cannot be restarted from the same point, and any partial results may be lost or inconsisten Destructive · High cancel_fulfillment Cancelling a fulfillment is a significant irreversible-in-practice action: it reverses a shipped status, potentially triggers carrier cancellations, invalidates tracking information, and disrupts downstream logistics.

60 of AdminAgent's 123 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control AdminAgent

PolicyLayer is an MCP gateway — it sits between your AI agents and AdminAgent, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "capture_payment": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "cancel_bulk_operation": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "activate_discount": {
    "limits": [
      {
        "counter": "activate_discount_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "abandoned_cart_value": {
    "limits": [
      {
        "counter": "abandoned_cart_value_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register AdminAgent — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ADMINAGENT →

Instant setup, no code required.

FULL CATALOGUE

All 123 AdminAgent tools

FINANCIAL 2 tools

Financial capture_payment Capture an authorized payment on an order. Financial create_refund create_refund

DESTRUCTIVE 12 tools

Destructive cancel_bulk_operation Cancel a running bulk operation. Destructive cancel_fulfillment Cancel a fulfillment (unmark as shipped). Destructive cancel_order cancel_order Destructive delete_collection Delete a collection permanently. Destructive delete_customer delete_customer Destructive delete_discount delete_discount Destructive delete_draft_order Delete a draft order permanently. Destructive delete_metafield delete_metafield Destructive delete_metaobject Delete a metaobject entry. Destructive delete_page Delete a page permanently. Destructive delete_product Delete a product permanently. Destructive delete_variants delete_variants

EXECUTE 2 tools

Execute run_bulk_query run_bulk_query Execute run_shopifyql run_shopifyql

WRITE 44 tools

Write activate_discount Activate a discount (make it usable). Write activate_inventory_at_location Start tracking inventory for an item at a specific location. Write adjust_inventory adjust_inventory Write close_order Close/archive an order. Write close_return Close a return (mark as resolved). Write complete_draft_order Convert a draft order into a real order. Write create_automatic_discount create_automatic_discount Write create_code_discount create_code_discount Write create_collection create_collection Write create_customer create_customer Write create_draft_order create_draft_order Write create_fulfillment create_fulfillment Write create_metaobject create_metaobject Write create_page create_page Write create_product create_product Write create_return create_return Write create_variants create_variants Write custom_date_comparison custom_date_comparison Write deactivate_discount Deactivate a discount (make it unusable without deleting). Write deactivate_inventory_at_location deactivate_inventory_at_location Write duplicate_product duplicate_product Write hold_fulfillment_order hold_fulfillment_order Write manage_collection_products manage_collection_products Write manage_product_options manage_product_options Write manage_redirects manage_redirects Write mark_order_paid Mark an order as paid (for manual payment methods). Write merge_customers merge_customers Write open_order Reopen a closed/archived order. Write publish_resource Publish a resource (product, collection, page) to a sales channel. Write release_fulfillment_order Release a hold on a fulfillment order (allow shipping to proceed). Write send_draft_invoice send_draft_invoice Write set_customer set_customer Write set_inventory set_inventory Write set_metafields set_metafields Write set_product set_product Write unpublish_resource Unpublish a resource from a sales channel. Write update_collection update_collection Write update_customer update_customer Write update_marketing_consent update_marketing_consent Write update_order update_order Write update_page Update an existing page. Write update_product update_product Write update_tracking update_tracking Write update_variants update_variants

READ 63 tools

Read abandoned_cart_value Total value sitting in abandoned carts. Read basket_analysis Basket analysis — frequently bought together products. Read channel_attribution Traffic and revenue by UTM source/medium. Read check_bulk_operation check_bulk_operation Read cohort_retention Cohort retention — customer retention by acquisition month. Read conversion_funnel Conversion funnel — sessions, add-to-cart, checkout, purchase rates. Read customer_acquisition New vs returning customer metrics. Read customer_ltv Customer lifetime value — top customers by total spend. Read customer_rfm_segments customer_rfm_segments Read discount_roi Discount effectiveness — AOV with vs without discounts, top codes. Read get_collection get_collection Read get_customer get_customer Read get_discount get_discount Read get_draft_order Get full details for a draft order. Read get_fulfillment_orders get_fulfillment_orders Read get_inventory_levels get_inventory_levels Read get_location Get details for a single location. Read get_metafields Get metafields for any resource (product, order, customer, etc.). Read get_metaobject Get a metaobject entry. Read get_order get_order Read get_page Get full details for a page. Read get_product get_product Read get_product_inventory Get inventory for all variants of a product across all locations. Read get_shop Get store information (name, domain, plan, currency, address, timezone). Read inventory_audit Inventory health audit. Read inventory_turnover Inventory turnover analysis — velocity, days of supply, dead stock. Read list_abandoned_checkouts list_abandoned_checkouts Read list_articles List and search blog articles. Read list_blogs List all blogs. Read list_collections list_collections Read list_customers list_customers Read list_discounts list_discounts Read list_draft_orders List and search draft orders. Read list_files list_files Read list_locations List all store locations. Read list_metafield_definitions list_metafield_definitions Read list_metaobjects List metaobject entries of a given type. Read list_orders list_orders Read list_pages List all pages. Read list_payouts list_payouts Read list_products list_products Read list_publications List sales channels/publications (Online Store, Shop, POS, etc.). Read list_segments List customer segments. Read list_themes List all themes (shows which is published/main). Read order_pattern_analysis Order patterns — peak hours, peak days, time distribution. Read pricing_audit Pricing consistency audit. Read product_health_audit Product catalog health audit. Read product_performance_ranking product_performance_ranking Read product_sales_detail Detailed product sales — units, revenue, returns, conversion rate. Read profit_margin_report profit_margin_report Read repeat_purchase_rate Repeat purchase rate — % of customers who buy more than once. Read return_analysis Return/refund analysis by product. Read revenue_by_channel Revenue breakdown by sales channel. Read revenue_by_discount Revenue breakdown by discount code. Read revenue_by_geography Revenue breakdown by geography. Read revenue_by_product Revenue breakdown by product. Read revenue_dashboard Revenue overview — total sales, orders, AOV for a period. Read sales_trend Sales trend over time — revenue, orders, and AOV by period. Read seo_audit seo_audit Read shipping_analysis Shipping revenue and methods analysis. Read store_health_score Composite store health score (0-100) across multiple dimensions. Read time_analysis Revenue/orders over time (daily, weekly, monthly, hourly). Read yoy_comparison Year-over-year comparison for any metric.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about AdminAgent

Can an AI agent move money through the AdminAgent MCP server? +

Yes. The AdminAgent server exposes 2 financial tools including capture_payment, create_refund. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the AdminAgent MCP server? +

Yes. The AdminAgent server exposes 12 destructive tools including cancel_bulk_operation, cancel_fulfillment, cancel_order. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through AdminAgent? +

The AdminAgent server has 44 write tools including activate_discount, activate_inventory_at_location, adjust_inventory. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach AdminAgent.

How many tools does the AdminAgent MCP server expose? +

123 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 63 are read-only. 60 can modify, create, or delete data.

How do I enforce a policy on AdminAgent? +

Register the AdminAgent MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every AdminAgent tool call.

Deterministic rules across all 123 AdminAgent tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ADMINAGENT →

Instant setup, no code required.

123 AdminAgent tools catalogued and risk-classified — across an index of 43,000+ MCP servers.