get_customers

What get_customers does on Shopify Graphql

AI agents call get_customers to retrieve information from Shopify Graphql without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_customers is rated Low

This tool retrieves customer data from a Shopify store. The verb 'Fetch' and the lack of any mention of modification, deletion, or execution indicate this is a pure Read operation. The blast radius is low: unauthorized access to customer data is a concern, but the tool cannot modify, delete, or commit financial operations by itself. Confidence is high because the description is explicit about the read-only nature.

From the tool's definition Tool name is 'get_customers' and description states 'Fetch customers from the Shopify store with optional filtering' — both indicate a retrieval operation with no modification or side effects.

The rule that runs get_customers safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Shopify Graphql, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_customers, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_customers": {}
  }
}

Questions about get_customers