update_collection_columns

What update_collection_columns does on Webcake Storefront

AI agents use update_collection_columns to create or update resources in Webcake Storefront, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Webcake Storefront environment.

Why update_collection_columns is rated Medium

This tool creates or modifies collection configuration (columns, presumably structure or display settings) in a storefront builder. Write operations on collection metadata are reversible and do not delete data or execute arbitrary code. Severity is medium because misconfiguration could affect store operations or customer experience, but the action itself is non-destructive and recoverable.

From the tool's definition Tool name 'update_collection_columns' and description 'Add or change a collection' indicate modification of collection metadata/structure. The verbs 'Add or change' are reversible write operations.

The rule that runs update_collection_columns safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Webcake Storefront, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_collection_columns, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_collection_columns": {
      "limits": [
        {
          "counter": "update_collection_columns_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_collection_columns