BinanceDeliveryAccount

What BinanceDeliveryAccount does on Binance MCP Server

AI agents call BinanceDeliveryAccount to retrieve information from Binance MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why BinanceDeliveryAccount is rated Low

This tool retrieves account state and financial data (assets, positions, risk metrics) from Binance without modifying or executing trades. However, the severity is medium rather than low because the information retrieved is sensitive financial data that could inform malicious trading decisions or reveal profitable positions an attacker could exploit. No financial transaction, execution, or deletion occurs.

From the tool's definition Tool description states 'Get current COIN-M Futures account information' — the verb 'Get' and the informational nature of retrieving account assets, positions, and risk metrics indicate a read-only operation with no data modification.

The rule that runs BinanceDeliveryAccount safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Binance MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For BinanceDeliveryAccount, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "BinanceDeliveryAccount": {}
  }
}

Questions about BinanceDeliveryAccount