# get_gift_cards Fetch gift cards from the store Agent View of the PolicyLayer registry record for `get_gift_cards`. HTML page: https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/get-gift-cards ## Facts - Tool: `get_gift_cards` - Server: Shopify Graphql (`uvu-store/shopify-graphql-mcp`) — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp.md - Homepage: https://github.com/UVU-Store/shopify-graphql-mcp - Risk category: Read (Low risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Allowed ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "get_gift_cards", "arguments": {} } } ``` ## Why get_gift_cards is rated Low This tool retrieves gift card data from the Shopify store without creating, modifying, or deleting any information. The verb 'Fetch' confirms a read-only operation. While gift card data may be sensitive (containing balances or usage information), the blast radius of accidental misuse is limited to unauthorized data access rather than system compromise or financial loss. From the tool's own definition: "Tool name 'get_gift_cards' and description 'Fetch gift cards from the store' indicate a data retrieval operation with no modification or deletion." ## Use case AI agents call get_gift_cards to retrieve information from Shopify Graphql without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere. ## Recommended policy (PolicyLayer) Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Shopify Graphql: ```json { "version": "1", "default": "deny", "tools": { "get_gift_cards": {} } } ``` ## Other tools on Shopify Graphql (318) - `cancel_fulfillment_order` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/cancel-fulfillment-order.md - `cancel_order` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/cancel-order.md - `cancel_subscription_contract` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/cancel-subscription-contract.md - `delete_app_proxy` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-app-proxy.md - `delete_cart_transform` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-cart-transform.md - `delete_channel` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-channel.md - `delete_collection` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-collection.md - `delete_company` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-company.md - `delete_company_contact` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-company-contact.md - `delete_custom_fulfillment_service` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-custom-fulfillment-service.md - `delete_custom_pixel` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-custom-pixel.md - `delete_customer` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-customer.md - `delete_customer_address` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-customer-address.md - `delete_delivery_customization` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-delivery-customization.md - `delete_delivery_option_generator` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-delivery-option-generator.md - `delete_discount` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-discount.md - `delete_draft_order` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-draft-order.md - `delete_file` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-file.md - `delete_fulfillment_constraint_rule` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-fulfillment-constraint-rule.md - `delete_location` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-location.md - `delete_market` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-market.md - `delete_marketing_engagements` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-marketing-engagements.md - `delete_marketing_event` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-marketing-event.md - `delete_menu` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-menu.md - `delete_metaobject` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-metaobject.md - `delete_metaobject_definition` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-metaobject-definition.md - `delete_order` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-order.md - `delete_packing_slip_template` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-packing-slip-template.md - `delete_page` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-page.md - `delete_payment_customization` — Destructive — https://policylayer.com/tools/uvu-store-shopify-graphql-mcp/delete-payment-customization.md - …and 288 more: https://policylayer.com/tools/uvu-store-shopify-graphql-mcp.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=uvu-store-shopify-graphql-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/uvu-store-shopify-graphql-mcp