getPositions

What getPositions does on Zerodha Kite MCP Server

AI agents call getPositions to retrieve information from Zerodha Kite MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why getPositions is rated Low

The tool retrieves position information without modifying state or executing trades. While the server deals with financial data, getPositions itself only queries existing positions—a read operation with no side effects. Severity is low because unauthorized position data retrieval, while undesirable, does not move money or cause direct financial loss compared to trading operations.

From the tool's definition Tool name 'getPositions' with context from sibling tools (buyStock, sellStock, getHoldings) indicates a retrieval function. No description provided, but follows the pattern of read-only query methods in financial systems.

The rule that runs getPositions safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Zerodha Kite MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For getPositions, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "getPositions": {}
  }
}

Questions about getPositions