binance_us_subaccount_list

What binance_us_subaccount_list does on Binance US MCP Server

AI agents call binance_us_subaccount_list to retrieve information from Binance US MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why binance_us_subaccount_list is rated Low

This tool retrieves and queries sub-account information without creating, modifying, deleting, or executing operations. It is clearly a Read operation. Severity is medium rather than low because exposure of sub-account lists could enable account enumeration attacks or social engineering, though it does not directly move funds or cause destructive damage.

From the tool's definition Tool description states 'Get a list of all sub-accounts' with filtering by email or status. Uses verb 'Get' which retrieves data without modification. However, the sensitive nature of sub-account information in a financial exchange context elevates severity.

The rule that runs binance_us_subaccount_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Binance US MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For binance_us_subaccount_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "binance_us_subaccount_list": {}
  }
}

Questions about binance_us_subaccount_list