orders_list
List ecommerce orders with filters for status, payment status, and date range. Access customer personal data only with explicit consent via force parameter.
Instructions
List ecommerce orders (GET /admin/api/ecommerce/v1/orders). Read-only. Optional filters: status (e.g. 'created', 'cancelled'), payment_status (e.g. 'paid', 'unpaid'), created_after (ISO8601), created_before (ISO8601). include_pii=false (default) strips customer email / name / address / phone / IP via whitelist. include_pii=true REQUIRES force=true alongside — passing include_pii=true without force=true is rejected (LLM-side PII-exfiltration gate; see SECURITY.md). MCP hosts surface force as a destructive-hint approval, which keeps prompt-injected include_pii=true calls behind operator consent.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| site | Yes | ||
| status | No | Order status filter (q.order.status.$eq). | |
| payment_status | No | Payment status filter (q.order.payment_status.$eq). | |
| created_after | No | ISO8601 timestamp; orders created at or after (q.order.created_at.$gteq). | |
| created_before | No | ISO8601 timestamp; orders created at or before (q.order.created_at.$lteq). | |
| include_pii | No | Default false (strips PII via whitelist). Set true to keep customer email / name / address / phone in the response. Requires force=true. | |
| force | No | Required when include_pii=true (PII-access acknowledgement gate; see SECURITY.md). Ignored otherwise. Default false. |