categories_get_all

What categories_get_all does on MCP Dynamics 365 Commerce Server

AI agents call categories_get_all to retrieve information from MCP Dynamics 365 Commerce Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why categories_get_all is rated Low

This tool retrieves product or content categories from the Dynamics 365 Commerce system without modifying, deleting, or executing any operations. It is a straightforward data retrieval (Read) with minimal risk—an AI agent cannot cause harm by requesting a category list. The low severity reflects that misuse would only result in unnecessary data fetches, not business impact.

From the tool's definition Tool name 'categories_get_all' and description 'Gets full list of categories' indicate a retrieval operation with no side effects. The verb 'gets' and the read-only nature of fetching a category list confirm this is a query operation.

Risk signalsBulk/mass operation — affects multiple targets

The rule that runs categories_get_all safely

PolicyLayer is an MCP gateway: it sits between your AI agents and MCP Dynamics 365 Commerce Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For categories_get_all, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "categories_get_all": {}
  }
}

Questions about categories_get_all