polymarket_get_orders

What polymarket_get_orders does on Polymarket MCP Server

AI agents call polymarket_get_orders to retrieve information from Polymarket MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why polymarket_get_orders is rated Low

This tool retrieves existing user order data with no side effects or mutations. It falls under the Read category as a simple data query operation. Severity is low because unauthorized access to order history poses minimal direct harm compared to write/execute/financial operations, though it could expose trading patterns or sensitive position data to attackers.

From the tool's definition Tool name 'polymarket_get_orders' and description indicates retrieval of user orders. Server description explicitly states 'read-only access to market data, events, orderbooks, and user positions'.

The rule that runs polymarket_get_orders safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Polymarket MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For polymarket_get_orders, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "polymarket_get_orders": {}
  }
}

Questions about polymarket_get_orders