# Bedrock + WooCommerce canonical abilities tool boundary

Companion to **Amazon Bedrock WooCommerce Integration: Product and Order Reads on AgentCore and Canonical Abilities**.

This folder is a worksheet. It is not a client engagement, not a benchmark, and not a runnable store. There is no Application Password here.

## Use it

1. Open [`tool-boundary.md`](tool-boundary.md).
2. For your operations agent, leave week-one rows at **Allow** or **Deny** as written. Change a Deny only when you have named the WordPress user and the ability id.
3. Do not register `mcp-adapter/execute-ability`, product writes, order writes, or Store API checkout on this allow-list.
4. Keep the Application Password off the prompt. A shopper Cart Token belongs on a different agent.

Checked against the WooCommerce MCP overview, the 12 May 2026 canonical-abilities note, and the 10.9 domain ability classes on trunk, on **15 October 2026**. MCP is still marked developer preview. The seven ability ids can move while that preview lasts. Re-read the ability schema before you change a row.