update_course

What update_course does on Webcake Storefront

AI agents use update_course to create or update resources in Webcake Storefront, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Webcake Storefront environment.

Why update_course is rated Medium

This tool creates or modifies data reversibly without deleting it, fitting the Write category. Severity is high because unintended course updates in an e-commerce storefront could disrupt customer experience, product listings, or service delivery. The incomplete description ('Pass' cuts off) lowers confidence slightly, but the intent is clear from the name and context (storefront with products/orders/authoring).

From the tool's definition Tool name 'update_course' and description 'Update a course by id (partial)' indicate modification of existing data. The word 'Update' and 'partial' suggest reversible changes to course records in a storefront system.

The rule that runs update_course safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Webcake Storefront, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_course, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_course": {
      "limits": [
        {
          "counter": "update_course_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_course