update_site_settings

What update_site_settings does on Webcake Storefront

AI agents use update_site_settings to create or update resources in Webcake Storefront, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Webcake Storefront environment.

Why update_site_settings is rated Medium

This tool modifies site-level configuration and settings, which are reversible changes (Write category). However, severity is high because updating site settings can have broad impact across the storefront—affecting store behavior, customer experience, and potentially integrations. An agent given incorrect instructions could misconfigure critical site parameters, necessitating manual restoration.

From the tool's definition Tool name 'update_site_settings' and description 'Update general site settings' indicate modification of site configuration data. The incomplete description ('The \') provides limited detail, but the verb 'update' clearly indicates write/modification action.

The rule that runs update_site_settings safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Webcake Storefront, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_site_settings, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_site_settings": {
      "limits": [
        {
          "counter": "update_site_settings_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_site_settings