# learn_shopify_api

Learn about supported Shopify APIs

Agent View of the PolicyLayer registry record for `learn_shopify_api`. HTML page: https://policylayer.com/tools/shopify/learn-shopify-api

## Facts

- Tool: `learn_shopify_api`
- Server: Shopify Dev (`@Shopify/dev-mcp`) — https://policylayer.com/tools/shopify.md
- Install: `npx -y @Shopify/dev-mcp`
- Homepage: https://github.com/Shopify/dev-mcp
- Risk category: Read (Low risk)
- Registry record: grade B, identity verified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "learn_shopify_api",
    "arguments": {}
  }
}
```

## Why learn_shopify_api is rated Low

This tool retrieves or queries documentation and information about Shopify APIs. It has no side effects, does not modify data, does not execute code, and does not delete or create resources. It is a Read operation with low severity since misuse would only result in the AI agent accessing API documentation, which poses minimal risk.

From the tool's own definition: "Tool name is 'learn_shopify_api' and description states 'Learn about supported Shopify APIs'. The verb 'learn' and 'about' indicate retrieval and query of informational content about APIs, with no modification or execution."

## Use case

AI agents call learn_shopify_api to retrieve information from Shopify Dev without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Shopify Dev:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "learn_shopify_api": {}
  }
}
```

## Other tools on Shopify Dev (5)

- `fetch_full_docs` — Read — https://policylayer.com/tools/shopify/fetch-full-docs.md
- `introspect_admin_schema` — Read — https://policylayer.com/tools/shopify/introspect-admin-schema.md
- `search_docs_chunks` — Read — https://policylayer.com/tools/shopify/search-docs-chunks.md
- `validate_graphql_codeblocks` — Read — https://policylayer.com/tools/shopify/validate-graphql-codeblocks.md
- `validate_theme_codeblocks` — Read — https://policylayer.com/tools/shopify/validate-theme-codeblocks.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=shopify · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/shopify