woo_create_customer

What woo_create_customer does on Wordpress

AI agents use woo_create_customer to create or update resources in Wordpress, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Wordpress environment.

Why woo_create_customer is rated Medium

Creating a customer account is a reversible write operation—new customer records can be edited or deleted later. It does not delete data (Destructive), execute arbitrary code (Execute), or move money (Financial). The severity is medium because creating fake or spam customers could degrade system integrity and user experience, but individual customer creation is a normal business operation.

From the tool's definition Tool name 'woo_create_customer' and description 'Create a customer' indicate creation of new data in a WooCommerce system. This is a write operation that modifies the database by adding a new customer record.

The rule that runs woo_create_customer safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Wordpress, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For woo_create_customer, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "woo_create_customer": {
      "limits": [
        {
          "counter": "woo_create_customer_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about woo_create_customer