get_balance

What get_balance does on 2captcha

AI agents call get_balance to retrieve information from 2captcha without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_balance is rated Low

The tool only retrieves the current balance from the user's 2Captcha account. It does not modify, delete, or move funds—it simply queries and returns data. This is a straightforward Read operation with minimal risk. Severity is low because even if exposed to an AI agent, the worst outcome is information disclosure of the account balance, which has limited blast radius.

From the tool's definition Tool name is 'get_balance' and description states 'Check your 2Captcha account balance.' This is a read-only query operation that retrieves account information with no side effects.

The rule that runs get_balance safely

PolicyLayer is an MCP gateway: it sits between your AI agents and 2captcha, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_balance, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_balance": {}
  }
}

Questions about get_balance