update_script_tag

What update_script_tag does on Shopify Graphql

AI agents use update_script_tag to create or update resources in Shopify Graphql, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Shopify Graphql environment.

Why update_script_tag is rated Medium

This tool modifies existing data (script tags) reversibly without deleting it. However, the high severity reflects that script tags execute arbitrary code in the storefront environment, creating significant risk if an AI agent injects malicious JavaScript. While categorized as Write (data modification), the blast radius approaches Execute-level danger due to code injection potential.

From the tool's definition Tool name 'update_script_tag' and description 'Update an existing script tag' indicate modification of stored configuration. Script tags in Shopify control JavaScript injected into storefronts, affecting customer-facing functionality.

The rule that runs update_script_tag safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Shopify Graphql, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_script_tag, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_script_tag": {
      "limits": [
        {
          "counter": "update_script_tag_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_script_tag