get_holdings_tool

What get_holdings_tool does on Upstox MCP Server

AI agents call get_holdings_tool to retrieve information from Upstox MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_holdings_tool is rated Low

This tool queries and retrieves existing financial data (holdings information) from a user's brokerage account. It does not create, modify, delete, or execute any transactions. While the data retrieved is financially sensitive, the tool itself performs no actions that could alter account state or commit financial obligations. This is purely informational access, placing it in the Read category with low severity.

From the tool's definition Tool name 'get_holdings_tool' and description 'Get the user holdings from their Upstox account' indicate data retrieval with no side effects. The verb 'Get' and the read-only nature of querying account holdings confirm this is a retrieval operation.

The rule that runs get_holdings_tool safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Upstox MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_holdings_tool, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_holdings_tool": {}
  }
}

Questions about get_holdings_tool