Critical-risk tools in Alpaca MCP Gold Standard

Critical severity Alpaca MCP Gold Standard MCP Server 5 of 31 tools

5 of the 31 tools in Alpaca MCP Gold Standard are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cancel_order_tool Destructive

Cancels an existing pending order.
clear_portfolio_state_tool Destructive

Clears all portfolio state and tracked symbols. Useful for starting fresh or testing.
place_limit_order_tool Financial

place_limit_order_tool
place_market_order_tool Financial

place_market_order_tool
place_stop_loss_order_tool Financial

place_stop_loss_order_tool

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Alpaca MCP Gold Standard

Tools at critical risk

Attacks that target this class

More on Alpaca MCP Gold Standard

Enforce policy on every Alpaca MCP Gold Standard tool call.