# stocktoken_execute_plan

Build non-custodial tx plan (approve + swap) via best venue (Uniswap / 0x). Does NOT sign or broadcast. Chain 4663.

Agent View of the PolicyLayer registry record for `stocktoken_execute_plan`. HTML page: https://policylayer.com/tools/dev-aatos-aatos/stocktoken-execute-plan

## Facts

- Tool: `stocktoken_execute_plan`
- Server: AI Agent Tokenized Stock OS (`https://aatos.dev/mcp`) — https://policylayer.com/tools/dev-aatos-aatos.md
- Homepage: https://github.com/https://aatos.dev/mcp
- Risk category: Execute (High risk)
- Registry record: grade F, identity unverified
- Server auth posture: open
- Server rate-limited: no
- Parameters: 9 (3 required)
- Recommended policy verdict: Rate-limited

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `owner` | string | yes |  |
| `tokenIn` | string | yes |  |
| `amountIn` | string | no |  |
| `tokenOut` | string | yes |  |
| `sessionId` | string | no |  |
| `approveMax` | boolean | no |  |
| `notionalUsd` | number | no |  |
| `slippageBps` | integer | no |  |
| `amountInHuman` | string | no |  |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "stocktoken_execute_plan",
    "arguments": {
      "owner": "<owner>",
      "tokenIn": "<tokenIn>",
      "tokenOut": "<tokenOut>"
    }
  }
}
```

## Why stocktoken_execute_plan is rated High

stocktoken_execute_plan triggers real processes with real consequences. An agent gone sideways doesn't fire it once. It starts dozens of builds, sends mass notifications, or burns through compute before anyone looks up.

## Use case

AI agents invoke stocktoken_execute_plan to trigger actions in AI Agent Tokenized Stock OS. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches AI Agent Tokenized Stock OS:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "stocktoken_execute_plan": {
      "limits": [
        {
          "counter": "stocktoken_execute_plan_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on AI Agent Tokenized Stock OS (36)

- `stocktoken_morpho_deposit_plan` — Financial — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-morpho-deposit-plan.md
- `stocktoken_morpho_withdraw_plan` — Financial — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-morpho-withdraw-plan.md
- `stocktoken_access_status` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-access-status.md
- `stocktoken_basket_preview` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-basket-preview.md
- `stocktoken_explain_routing` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-explain-routing.md
- `stocktoken_fees` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-fees.md
- `stocktoken_find_pools` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-find-pools.md
- `stocktoken_get` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-get.md
- `stocktoken_intent_typed_data` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-intent-typed-data.md
- `stocktoken_liquidity_matrix` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-liquidity-matrix.md
- `stocktoken_list` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-list.md
- `stocktoken_metrics` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-metrics.md
- `stocktoken_morpho_position` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-morpho-position.md
- `stocktoken_morpho_status` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-morpho-status.md
- `stocktoken_permit2_prepare` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-permit2-prepare.md
- `stocktoken_policy_get` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-policy-get.md
- `stocktoken_price` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-price.md
- `stocktoken_protocols` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-protocols.md
- `stocktoken_quote` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-quote.md
- `stocktoken_session_kill` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-session-kill.md
- `stocktoken_session_list` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-session-list.md
- `stocktoken_simulate` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-simulate.md
- `stocktoken_subscription_status` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-subscription-status.md
- `stocktoken_subscription_tiers` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-subscription-tiers.md
- `stocktoken_system_status` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-system-status.md
- `stocktoken_tip_assets` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-tip-assets.md
- `stocktoken_tip_presets` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-tip-presets.md
- `stocktoken_value_holdings` — Read — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-value-holdings.md
- `stocktoken_access_activate` — Write — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-access-activate.md
- `stocktoken_access_checkout` — Write — https://policylayer.com/tools/dev-aatos-aatos/stocktoken-access-checkout.md
- …and 6 more: https://policylayer.com/tools/dev-aatos-aatos.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=dev-aatos-aatos · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/dev-aatos-aatos