Keep your VTEX IO app permissions narrowly scoped.
What it does
Guides the design and review of least-privilege permissions and server-side access controls for VTEX IO apps.
When to use it
Use when a VTEX IO app needs permissions for external services, protected VTEX resources, or access-controlled behavior.
How to use it
It changes how the agent implements and reviews app permissions by requiring minimal declarations and explicit server-side access controls.
What you provide
- An existing project
Latest review
What you need · 0
No setup requirements listed.
Access · 0
No additional actions listed.