get_open_position

What get_open_position does on Alpaca MCP Server

AI agents call get_open_position to retrieve information from Alpaca MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_open_position is rated Low

This tool only retrieves information about an existing open position. It performs no mutations, does not execute trades or commands, does not delete data, and does not move money. While the server as a whole enables financial operations, this specific tool is a simple data retrieval operation with no side effects. Severity is low because reading position data poses minimal risk even if misused by an AI agent.

From the tool's definition Tool name 'get_open_position' and description 'Retrieves and formats details for a specific open position' indicate a read-only operation that queries existing data without modification, execution, or financial state changes.

The rule that runs get_open_position safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Alpaca MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_open_position, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_open_position": {}
  }
}

Questions about get_open_position