BinanceSubAccountGetApiKeyIpRestriction

What BinanceSubAccountGetApiKeyIpRestriction does on Binance MCP Server

AI agents call BinanceSubAccountGetApiKeyIpRestriction to retrieve information from Binance MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why BinanceSubAccountGetApiKeyIpRestriction is rated Low

This tool retrieves existing IP restriction settings for a sub-account API key. It is a read-only query operation that does not create, modify, delete, or execute any financial transactions. However, severity is elevated to medium because the data retrieved (IP restriction rules) could be sensitive information that, if exposed to an unauthorized actor, might facilitate social engineering or attacks on sub-accounts.

From the tool's definition Tool name includes 'Get' and description states 'Get IP restriction' — a retrieval operation with no modification or execution of trades/transfers. It queries configuration data for a sub-account API key.

The rule that runs BinanceSubAccountGetApiKeyIpRestriction safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Binance MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For BinanceSubAccountGetApiKeyIpRestriction, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "BinanceSubAccountGetApiKeyIpRestriction": {}
  }
}

Questions about BinanceSubAccountGetApiKeyIpRestriction