# update_user

Update an existing user

Agent View of the PolicyLayer registry record for `update_user`. HTML page: https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/update-user

## Facts

- Tool: `update_user`
- Server: Thinkific MCP Server (`ackbarguppi-ai/thinkific-mcp`) — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp.md
- Homepage: https://github.com/ackbarguppi-ai/thinkific-mcp
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "update_user",
    "arguments": {}
  }
}
```

## Why update_user is rated Medium

The tool modifies existing user records through the Thinkific REST Admin API. Updates are Write operations—reversible changes to data. Severity is high because user modifications in an educational platform can affect account access, billing, enrollments, and personal information. The context of a course management system handling students and orders amplifies the impact of unauthorized user modifications.

From the tool's own definition: "Tool name is 'update_user' and description states 'Update an existing user', indicating modification of user data. This is reversible (can be updated again) rather than destructive deletion."

## Use case

AI agents use update_user to create or update resources in Thinkific MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Thinkific MCP Server environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Thinkific MCP Server:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_user": {
      "limits": [
        {
          "counter": "update_user_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Thinkific MCP Server (108)

- `delete_category` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-category.md
- `delete_coupon` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-coupon.md
- `delete_group` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-group.md
- `delete_instructor` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-instructor.md
- `delete_promotion` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-promotion.md
- `delete_site_script` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-site-script.md
- `delete_user` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/delete-user.md
- `gql_bulk_remove_users_from_groups` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/gql-bulk-remove-users-from-groups.md
- `remove_group_analyst` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/remove-group-analyst.md
- `remove_products_from_category` — Destructive — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/remove-products-from-category.md
- `create_external_order` — Financial — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/create-external-order.md
- `purchase_external_order` — Financial — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/purchase-external-order.md
- `refund_external_order` — Financial — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/refund-external-order.md
- `get_bundle` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-bundle.md
- `get_category` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-category.md
- `get_chapter` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-chapter.md
- `get_content` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-content.md
- `get_coupon` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-coupon.md
- `get_course` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-course.md
- `get_course_review` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-course-review.md
- `get_enrollment` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-enrollment.md
- `get_group` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-group.md
- `get_instructor` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-instructor.md
- `get_order` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-order.md
- `get_performance_metrics` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-performance-metrics.md
- `get_product` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-product.md
- `get_promotion` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-promotion.md
- `get_promotion_by_coupon` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-promotion-by-coupon.md
- `get_publish_request` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-publish-request.md
- `get_site_info` — Read — https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp/get-site-info.md
- …and 78 more: https://policylayer.com/tools/ackbarguppi-ai-thinkific-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=ackbarguppi-ai-thinkific-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/ackbarguppi-ai-thinkific-mcp