get_customer_events

What get_customer_events does on Shopify Graphql

AI agents call get_customer_events to retrieve information from Shopify Graphql without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_customer_events is rated Low

This tool retrieves historical customer activity data without creating, modifying, deleting, or executing external operations. The verb 'Fetch' and the passive nature of the data (events that have already occurred) confirm this is a read operation. The low severity reflects minimal blast radius—exposure of customer event data is a privacy concern but not immediately destructive or financial.

From the tool's definition Tool name 'get_customer_events' and description 'Fetch customer events' indicate a retrieval operation with no modification capability. The examples listed (page views, product views, searches) are all read-only events.

The rule that runs get_customer_events safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Shopify Graphql, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_customer_events, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_customer_events": {}
  }
}

Questions about get_customer_events