# Bedrock + Shopify UCP tool boundary

Companion to **Amazon Bedrock Shopify Integration: A Production Shopping Agent on AgentCore and Shopify UCP**.

This folder is a worksheet. It is not a client engagement, not a benchmark, and not a runnable store. There are no Shopify tokens here.

## Use it

1. Open [`tool-boundary.md`](tool-boundary.md).
2. For your shopper agent, leave week-one rows at **Allow** or **Deny** as written. Change a Deny only when you have named the credential tier and the idempotency key.
3. Do not register `complete_checkout`, refunds, inventory writes, or discounts on the shopper allow-list.
4. Keep the Admin token off this agent. Merchant reads belong on a second tool set.

Checked against Shopify's UCP cart, checkout, auth, and Order MCP docs, and against AgentCore Gateway MCP targets, on **6 October 2026**.