account_details

What account_details does on Open Stocks MCP

AI agents call account_details to retrieve information from Open Stocks MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why account_details is rated Low

This tool retrieves financial account information (buying power, cash balances) without modifying or executing transactions. It is a Read operation. However, severity is high rather than low because the data retrieved is sensitive financial information that could be exploited if an AI agent leaks or misuses it (e.g., disclosing account balances, enabling social engineering).

From the tool's definition Tool name 'account_details' and description 'Gets comprehensive account details including buying power and cash balances' indicate data retrieval with no modification. The word 'Gets' confirms read-only operation.

The rule that runs account_details safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Open Stocks MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For account_details, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "account_details": {}
  }
}

Questions about account_details