update_app_proxy

What update_app_proxy does on Shopify Graphql

AI agents use update_app_proxy to create or update resources in Shopify Graphql, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Shopify Graphql environment.

Why update_app_proxy is rated Medium

This tool creates or modifies app proxy configuration, which is a reversible write operation. While app proxy misconfiguration could redirect requests or expose security risks (raising severity to medium), the operation itself can be undone by reverting the configuration. It does not delete data (Destructive), execute arbitrary code (Execute), move money (Financial), or retrieve data (Read).

From the tool's definition Tool description states 'Update an app proxy configuration' — 'update' indicates reversible modification of existing configuration data. App proxy configurations control request routing and security policies, making misuse impactful but not destructive.

The rule that runs update_app_proxy safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Shopify Graphql, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_app_proxy, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_app_proxy": {
      "limits": [
        {
          "counter": "update_app_proxy_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_app_proxy