update_redirect_url

What update_redirect_url does on Webcake Storefront

AI agents use update_redirect_url to create or update resources in Webcake Storefront, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Webcake Storefront environment.

Why update_redirect_url is rated Medium

The tool updates redirect URL configuration, which is a reversible modification operation. It does not delete data (Destructive), execute arbitrary code (Execute), move money (Financial), or merely read data (Read). Severity is medium because misconfigured redirects could cause user misdirection or phishing attacks, but the blast radius is limited to URL routing rather than data loss or financial impact.

From the tool's definition Tool name 'update_redirect_url' and description 'Update a redirect URL' indicate modification of existing data (redirect configuration). This is a write operation that creates or modifies data reversibly.

The rule that runs update_redirect_url safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Webcake Storefront, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_redirect_url, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_redirect_url": {
      "limits": [
        {
          "counter": "update_redirect_url_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_redirect_url