create_appointment_calendar

What create_appointment_calendar does on Webcake Storefront

AI agents use create_appointment_calendar to create or update resources in Webcake Storefront, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Webcake Storefront environment.

Why create_appointment_calendar is rated Medium

The tool performs a create operation on persistent data (a booking calendar), which modifies the storefront state. This is a Write action rather than Execute because it creates a specific data entity rather than executing arbitrary code or queries. Severity is medium because misconfiguration could affect customer booking workflows, but the impact is localized to calendar functionality and reversible.

From the tool's definition Tool description states 'Create a booking calendar' — a create operation that generates new data structures with side effects that are reversible (calendars can be modified or deleted later).

The rule that runs create_appointment_calendar safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Webcake Storefront, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_appointment_calendar, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_appointment_calendar": {
      "limits": [
        {
          "counter": "create_appointment_calendar_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_appointment_calendar