cart_merge_carts

What cart_merge_carts does on MCP Dynamics 365 Commerce Server

AI agents use cart_merge_carts to create or update resources in MCP Dynamics 365 Commerce Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your MCP Dynamics 365 Commerce Server environment.

Why cart_merge_carts is rated Medium

This tool modifies existing cart data by consolidating multiple carts into one, which is a Write-category action. Severity is medium rather than high because: (1) the operation is reversible (carts can typically be recreated or separated), (2) it affects transactional user data (shopping carts) rather than system-critical data, and (3) misuse by an AI agent could cause inconvenience (wrong carts merged) but not…

From the tool's definition Tool name 'cart_merge_carts' and description 'Merge multiple carts' indicate a data modification operation that combines cart entities. Merging is a reversible write operation that modifies cart state.

The rule that runs cart_merge_carts safely

PolicyLayer is an MCP gateway: it sits between your AI agents and MCP Dynamics 365 Commerce Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cart_merge_carts, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cart_merge_carts": {
      "limits": [
        {
          "counter": "cart_merge_carts_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about cart_merge_carts