// SCAN REPORT

Ibkr

33 tools. 7 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

7 can modify or destroy data

26 read-only

33 tools total

Community server · catalogue entry verified 12/06/2026

How to control Ibkr ↓

TOOL MAP

What Ibkr exposes to your agents

Read (26) Write / Execute (2) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Ibkr tools

Financial · High ibkr_cancel_order Cancelling a brokerage order has direct financial implications — it modifies active trading instructions on a live brokerage account (Interactive Brokers). Financial · Critical ibkr_exercise_options Exercising an options contract triggers a real financial transaction — it converts an options position into an underlying asset position (or cash settlement), committing financial obligations and potentially moving signi Financial · Critical ibkr_place_order This tool interacts with a brokerage platform to place orders for financial instruments. Destructive · Critical ibkr_global_cancel Canceling all active orders is a destructive operation that cannot be undone and has immediate financial consequences.

7 of Ibkr's 33 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Ibkr

PolicyLayer is an MCP gateway — it sits between your AI agents and Ibkr, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "ibkr_cancel_order": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "ibkr_global_cancel": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Cap read operations

{
  "ibkr_debug_market_data_snapshot": {
    "limits": [
      {
        "counter": "ibkr_debug_market_data_snapshot_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Ibkr — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON IBKR →

Free to start. No card required.

FULL CATALOGUE

All 33 Ibkr tools

FINANCIAL 3 tools

Financial ibkr_cancel_order Cancel a single IBKR order by orderId. Requires confirm=true. Financial ibkr_exercise_options Exercise or lapse an options contract. Requires confirm=true. Financial ibkr_place_order Place an IBKR order. Defaults to dry_run=true and transmit=false for safety.

DESTRUCTIVE 1 tools

Destructive ibkr_global_cancel Cancel all active IBKR orders. Requires confirm=true.

EXECUTE 2 tools

Execute ibkr_preview_order Run IBKR what-if analysis for an order and return margin/commission impact. Execute ibkr_run_scanner Run a market scanner subscription and return ranked results.

READ 26 tools

Read ibkr_debug_market_data_snapshot Return diagnostic market data snapshots for a contract. Read ibkr_get_account_summary Return account summary values such as NetLiquidation and BuyingPower. Read ibkr_get_account_values Return account values snapshot for the specified account. Read ibkr_get_cash_activity ibkr_get_cash_activity Read ibkr_get_contract_details Return contract details for a given contract input. Read ibkr_get_dividends ibkr_get_dividends Read ibkr_get_executions Return executions/fills matching the provided filters. Read ibkr_get_flex_statement ibkr_get_flex_statement Read ibkr_get_fundamental_data Return a fundamentals report for a contract. Read ibkr_get_head_timestamp Return the earliest available historical data timestamp. Read ibkr_get_historical_bars Return historical OHLCV bars for a contract. Read ibkr_get_historical_news Return historical news headlines for a contract. Read ibkr_get_historical_ticks Return historical ticks for a contract. Read ibkr_get_market_data_snapshot Return a one-shot market data snapshot for contracts. Read ibkr_get_market_depth_snapshot Return a one-shot market depth (L2) snapshot. Read ibkr_get_news_article Return a news article body for a provider/article id. Read ibkr_get_news_providers Return available news provider codes and names. Read ibkr_get_open_orders Return open orders with contract details and status. Read ibkr_get_option_chain Return option chain metadata for an underlying. Read ibkr_get_portfolio Return positions and best-effort P&L for an IBKR account. Read ibkr_get_scanner_params Return market scanner parameter definitions. Read ibkr_get_statement_summary ibkr_get_statement_summary Read ibkr_get_statement_topics ibkr_get_statement_topics Read ibkr_get_trade_confirmations ibkr_get_trade_confirmations Read ibkr_get_transactions Return past transaction history from IBKR executions, enriched with commissions and net cash flow when availab Read ibkr_search_symbols Search for symbols and matching contracts.

OTHER 1 tools

Other ibkr_oca_group ibkr_oca_group

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Ibkr

Can an AI agent move money through the Ibkr MCP server? +

Yes. The Ibkr server exposes 3 financial tools including ibkr_cancel_order, ibkr_exercise_options, ibkr_place_order. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Ibkr MCP server? +

Yes. The Ibkr server exposes 1 destructive tools including ibkr_global_cancel. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How many tools does the Ibkr MCP server expose? +

33 tools across 3 categories: Destructive, Execute, Read. 26 are read-only. 7 can modify, create, or delete data.

How do I enforce a policy on Ibkr? +

Register the Ibkr MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Ibkr tool call.

Deterministic rules across all 33 Ibkr tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON IBKR →

Free to start. No card required.

33 Ibkr tools catalogued and risk-classified — across an index of 43,000+ MCP servers.