update_shopping_list

What update_shopping_list does on Mealie MCP Server

AI agents use update_shopping_list to create or update resources in Mealie MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mealie MCP Server environment.

Why update_shopping_list is rated Medium

This tool modifies shopping list data (creating or updating shopping list entries), which is a Write operation. It has medium severity because misuse could corrupt or populate a user's shopping list with incorrect items, affecting meal planning activities, but the action is reversible through subsequent updates or deletions. It does not execute code, delete data permanently, or involve financial transactions.

From the tool's definition Tool description states 'Update an existing shopping list' - a clear modification action that changes existing data reversibly. The tool name and description indicate data mutation without permanent deletion or execution of external code.

The rule that runs update_shopping_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mealie MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_shopping_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_shopping_list": {
      "limits": [
        {
          "counter": "update_shopping_list_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_shopping_list