# get_positions A read tool on the Alpaca MCP Server MCP server. Agent View of the PolicyLayer registry record for `get_positions`. HTML page: https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-positions ## Facts - Tool: `get_positions` - Server: Alpaca MCP Server (`cliffsgpt/alpaca-mcp-clone`) — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone.md - Homepage: https://github.com/CliffsGPT/Alpaca-MCP-Clone - Risk category: Read (Low risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Allowed ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "get_positions", "arguments": {} } } ``` ## Why get_positions is rated Low 'get_positions' retrieves portfolio position data without modifying state. This is a Read operation. Severity is medium rather than low because position data could inform financial decisions, and access to detailed portfolio information on a trading platform carries moderate sensitivity. Confidence is 0.85 (not higher) due to empty description—inferred from naming convention and context of financial trading server. From the tool's own definition: "Tool name 'get_positions' with no description provided; sibling tools on Alpaca trading server include destructive and financial operations (cancel_orders, close_positions, exercise_options). The 'get_' prefix and naming convention indicate data retrieval." ## Use case AI agents call get_positions to retrieve information from Alpaca MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere. ## Recommended policy (PolicyLayer) Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Alpaca MCP Server: ```json { "version": "1", "default": "deny", "tools": { "get_positions": {} } } ``` ## Other tools on Alpaca MCP Server (30) - `cancel_all_orders` — Destructive — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/cancel-all-orders.md - `cancel_order_by_id` — Destructive — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/cancel-order-by-id.md - `close_all_positions` — Destructive — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/close-all-positions.md - `exercise_options_position` — Financial — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/exercise-options-position.md - `place_crypto_order` — Financial — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/place-crypto-order.md - `place_option_market_order` — Financial — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/place-option-market-order.md - `place_stock_order` — Financial — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/place-stock-order.md - `get_account_info` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-account-info.md - `get_all_assets` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-all-assets.md - `get_asset_info` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-asset-info.md - `get_corporate_announcements` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-corporate-announcements.md - `get_crypto_bars` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-crypto-bars.md - `get_crypto_quotes` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-crypto-quotes.md - `get_market_calendar` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-market-calendar.md - `get_market_clock` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-market-clock.md - `get_open_position` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-open-position.md - `get_option_contracts` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-option-contracts.md - `get_option_latest_quote` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-option-latest-quote.md - `get_option_snapshot` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-option-snapshot.md - `get_orders` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-orders.md - `get_stock_bars` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-stock-bars.md - `get_stock_latest_bar` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-stock-latest-bar.md - `get_stock_latest_trade` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-stock-latest-trade.md - `get_stock_quote` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-stock-quote.md - `get_stock_snapshot` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-stock-snapshot.md - `get_stock_trades` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-stock-trades.md - `get_watchlists` — Read — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/get-watchlists.md - `close_position` — Write — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/close-position.md - `create_watchlist` — Write — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/create-watchlist.md - `update_watchlist` — Write — https://policylayer.com/tools/cliffsgpt-alpaca-mcp-clone/update-watchlist.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=cliffsgpt-alpaca-mcp-clone · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/cliffsgpt-alpaca-mcp-clone