assign_customer_tags

What assign_customer_tags does on Webcake Storefront

AI agents use assign_customer_tags to create or update resources in Webcake Storefront, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Webcake Storefront environment.

Why assign_customer_tags is rated Medium

This tool modifies customer data (tags) but the changes are reversible: tags can be added and removed. It affects potentially many customers ('multiple customers at once') which increases blast radius, but there is no permanent deletion or data destruction. The impact is primarily on customer attributes rather than transactional or financial systems, making it Write rather than Execute or higher severity categories.

From the tool's definition Tool performs 'Add or remove tags on multiple customers' — these are reversible modifications to customer metadata. The description explicitly states both add and remove operations on customer records.

The rule that runs assign_customer_tags safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Webcake Storefront, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For assign_customer_tags, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "assign_customer_tags": {
      "limits": [
        {
          "counter": "assign_customer_tags_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about assign_customer_tags