// SCAN REPORT

IOL MCP Server

42 tools. 13 can modify or destroy data without limits.

8 destructive tools with no built-in limits. Policy required.

Last updated:

13 can modify or destroy data
29 read-only
42 tools total

Community server · catalogue entry verified 29/06/2026

How to control IOL MCP Server ↓

TOOL MAP

What IOL MCP Server exposes to your agents

Read (29) Write / Execute (5) Destructive / Financial (8)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous IOL MCP Server tools

Financial · Critical comprar This tool directly initiates a financial trade (buy order) on a brokerage platform, committing real funds to purchase securities. Financial · Critical comprar_especie_d This tool places a purchase order for a financial instrument through the InvertirOnline trading platform, directly committing financial resources. Financial · Critical operar_cpd This tool performs a financial trading/payment operation with deferred payment checks (CPD - Cheques de Pago Diferido), which are financial instruments. Financial · Critical rescatar_fci Redeeming a mutual fund (FCI) is a financial transaction that moves money by liquidating investment positions.

13 of IOL MCP Server's 42 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control IOL MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and IOL MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "comprar": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "cancelar_operacion": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "calcular_perfil_asesorado": {
    "limits": [
      {
        "counter": "calcular_perfil_asesorado_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "calcular_comisiones_cpd": {
    "limits": [
      {
        "counter": "calcular_comisiones_cpd_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register IOL MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON IOL →

Instant setup, no code required.

FULL CATALOGUE

All 42 IOL MCP Server tools

FINANCIAL 7 tools
Financial comprar Crear una orden de compra Financial comprar_especie_d Crear una orden de compra de especie D Financial operar_cpd Realizar una operación con un cheque de pago diferido Financial rescatar_fci Rescatar un FCI Financial suscribir_fci Suscribir un FCI Financial vender Crear una orden de venta Financial vender_especie_d Crear una orden de venta de especie D
DESTRUCTIVE 1 tools
Destructive cancelar_operacion Cancelar una operación específica
EXECUTE 2 tools
Execute generar_token Generar un token para operaciones Execute validar_operatoria Validar una operación simplificada
WRITE 3 tools
Write calcular_perfil_asesorado Calcular y guardar perfil del inversor para un cliente asesorado Write guardar_movimientos_historicos_asesor Consultar o guardar movimientos históricos de clientes asesorados Write marcar_notificacion_leida Marcar notificación como leída
READ 29 tools
Read calcular_comisiones_cpd Calcular comisiones para un cheque de pago diferido Read calcular_perfil_sin_guardar Calcular perfil del inversor sin guardar los resultados Read cpd_puede_operar Verificar si el usuario puede operar con cheques de pago diferido Read crear_compra_operatoria_simplificada Crear una compra de operatoria simplificada Read notificacion_obtener_notificaciones Obtener notificaciones del usuario Read obtener_composicion_portafolio Obtener composición del portafolio por tipo de instrumento Read obtener_cotizacion_detalle_mobile Obtener detalle de cotización para móvil de un título Read obtener_cotizacion_serie_historica Obtener serie histórica de cotizaciones de un título Read obtener_cotizaciones_panel_operables Obtener cotizaciones operables de un instrumento en un panel Read obtener_cotizaciones_panel_todos Obtener todas las cotizaciones de un instrumento en un panel Read obtener_cpd Obtener cheques de pago diferido según estado y segmento Read obtener_datos_perfil Obtener datos del perfil del cliente Read obtener_estado_cuenta Obtener estado de cuenta del usuario Read obtener_fci Obtener información de fondos comunes de inversión Read obtener_instrumentos Obtener instrumentos disponibles para un país Read obtener_montos_estimados Obtener montos estimados para una operación simplificada Read obtener_montos_estimados_venta_mep Obtener montos estimados para una venta MEP simple Read obtener_opciones Obtener opciones de un título Read obtener_operacion Obtener detalle de una operación específica Read obtener_operaciones Obtener operaciones del usuario según filtros Read obtener_panel Obtener panel de instrumentos Read obtener_parametros_operatoria Obtener parámetros para un tipo de operatoria simplificada Read obtener_portafolio Obtener portafolio del usuario para un país específico Read obtener_portafolio_valorizado Obtener portafolio valorizado del usuario Read obtener_rendimiento_historico Obtener rendimiento histórico del portafolio Read obtener_test_inversor_asesor Obtener preguntas del test de inversor para asesores Read obtener_tipos_fondos Obtener tipos de fondos disponibles Read obtener_valor_referencia_mep Obtener valor de referencia MEP para una cotización Read titulos_obtener_cotizacion Obtener cotización de un título
FAQ

Questions about IOL MCP Server

Can an AI agent move money through the IOL MCP Server MCP server? +

Yes. The IOL MCP Server server exposes 7 financial tools including comprar, comprar_especie_d, operar_cpd. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the IOL MCP Server MCP server? +

Yes. The IOL MCP Server server exposes 1 destructive tools including cancelar_operacion. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through IOL MCP Server? +

The IOL MCP Server server has 3 write tools including calcular_perfil_asesorado, guardar_movimientos_historicos_asesor, marcar_notificacion_leida. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach IOL MCP Server.

How many tools does the IOL MCP Server MCP server expose? +

42 tools across 1 categories: Read. 29 are read-only. 13 can modify, create, or delete data.

How do I enforce a policy on IOL MCP Server? +

Register the IOL MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every IOL MCP Server tool call.

Deterministic rules across all 42 IOL MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON IOL →

Instant setup, no code required.

42 IOL MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.