update_shipping

What update_shipping does on Webcake Storefront

AI agents use update_shipping to create or update resources in Webcake Storefront, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Webcake Storefront environment.

Why update_shipping is rated Medium

This tool modifies shipping configuration data, which is a reversible write operation. While not creating new data, it updates existing configuration that affects order fulfillment and customer operations. Severity is high because misconfiguration could disrupt business operations, orders, and customer experience, but it is not destructive (config can be reverted) or financial (does not directly move money).

From the tool's definition Tool name 'update_shipping' indicates modification of shipping configuration. Description states 'Update shipping config' which explicitly indicates a write/modification operation on storefront settings.

The rule that runs update_shipping safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Webcake Storefront, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_shipping, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_shipping": {
      "limits": [
        {
          "counter": "update_shipping_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_shipping