# woo_create_customer Create a customer Agent View of the PolicyLayer registry record for `woo_create_customer`. HTML page: https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-create-customer ## Facts - Tool: `woo_create_customer` - Server: Wordpress (`@cavort-it-systems/wordpress-mcp`) — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp.md - Install: `npx -y @cavort-it-systems/wordpress-mcp` - Homepage: https://github.com/cvrt-jh/wordpress-mcp - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Rate-limited ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "woo_create_customer", "arguments": {} } } ``` ## Why woo_create_customer is rated Medium Creating a customer account is a reversible write operation—new customer records can be edited or deleted later. It does not delete data (Destructive), execute arbitrary code (Execute), or move money (Financial). The severity is medium because creating fake or spam customers could degrade system integrity and user experience, but individual customer creation is a normal business operation. From the tool's own definition: "Tool name 'woo_create_customer' and description 'Create a customer' indicate creation of new data in a WooCommerce system. This is a write operation that modifies the database by adding a new customer record." ## Use case AI agents use woo_create_customer to create or update resources in Wordpress, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Wordpress environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Wordpress: ```json { "version": "1", "default": "deny", "tools": { "woo_create_customer": { "limits": [ { "counter": "woo_create_customer_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Wordpress (313) - `acf_delete_field_group` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/acf-delete-field-group.md - `fields_delete_definition` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/fields-delete-definition.md - `fort_cache_purge` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/fort-cache-purge.md - `legal_delete_section` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-delete-section.md - `legal_put_document` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-put-document.md - `legal_reset_accessibility_report` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-reset-accessibility-report.md - `legal_restore_generator` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/legal-restore-generator.md - `mcp_bulk_delete_media` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-bulk-delete-media.md - `mcp_clean_comments` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-clean-comments.md - `mcp_clean_revisions` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-clean-revisions.md - `mcp_delete_cpt_post` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-cpt-post.md - `mcp_delete_media` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-media.md - `mcp_delete_menu` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-menu.md - `mcp_delete_menu_item` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-menu-item.md - `mcp_delete_option` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-option.md - `mcp_delete_term` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-term.md - `mcp_delete_theme` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-theme.md - `mcp_delete_user` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-user.md - `mcp_delete_widget` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-delete-widget.md - `mcp_flush_cache` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/mcp-flush-cache.md - `seo_clear_monitor_log` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-clear-monitor-log.md - `seo_delete_post_seo` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-delete-post-seo.md - `seo_delete_redirect` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-delete-redirect.md - `seo_delete_term_seo` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/seo-delete-term-seo.md - `stripe_recreate_webhook` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/stripe-recreate-webhook.md - `woo_delete_category` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-category.md - `woo_delete_coupon` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-coupon.md - `woo_delete_product` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-product.md - `woo_delete_variation` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-delete-variation.md - `woo_helper_create_invoice` — Destructive — https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp/woo-helper-create-invoice.md - …and 283 more: https://policylayer.com/tools/io-github-cvrt-jh-wordpress-mcp.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-cvrt-jh-wordpress-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-cvrt-jh-wordpress-mcp