Find roll, spread, or covered call/put candidates using real-time IB data. Auto-detects mode based on existing positions: - Short option found: roll candidates with credit/debit analysis - Long option found: short candidates to create a vertical spread - Long stock found: covered call/put candida...
AI agents invoke ib_find_short_roll to trigger actions in Trading Skills. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.
This tool queries real-time data from Interactive Brokers and auto-detects positions from an active brokerage account. While it appears to be an analysis/candidate-finding tool (suggesting rolls, spreads, covered calls), it connects to a live trading system (TWS/IB Gateway) and operates on real portfolio data.
From the tool's definition Find roll, spread, or covered call/put candidates using real-time IB data... Requires TWS or IB Gateway running locally... auto-detects from portfolio
Documented attack patterns abuse exactly the kind of access ib_find_short_roll gives an agent:
PolicyLayer is an MCP gateway — it sits between your AI agents and Trading Skills, and nothing reaches the server without passing your rules. This is the rule we recommend for ib_find_short_roll:
{
"version": "1",
"default": "deny",
"tools": {
"ib_find_short_roll": {
"limits": [
{
"counter": "ib_find_short_roll_rate",
"window": "minute",
"max": 10,
"scope": "grant"
}
]
}
}
}ib_find_short_roll stays usable, but rate-capped — a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.
Free to start. No card required.
Find roll, spread, or covered call/put candidates using real-time IB data. Auto-detects mode based on existing positions: - Short option found: roll candidates with credit/debit analysis - Long option found: short candidates to create a vertical spread - Long stock found: covered call/put candidates Requires TWS or IB Gateway running locally. Args: symbol: Ticker symbol (e.g., GOOG) port: IB port (7496 for live, 7497 for paper) account: Account ID (optional) strike: Current short strike (optional, auto-detects from portfolio) expiry: Current expiry YYYYMMDD (optional, auto-detects from portfolio) right: 'C' for call or 'P' for put (default: C). It is categorised as a Execute tool in the Trading Skills MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.
Register the Trading Skills MCP server in PolicyLayer and add a rule for ib_find_short_roll: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Trading Skills. Nothing to install.
ib_find_short_roll is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.
Yes. Add a rate_limit block to the ib_find_short_roll rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for ib_find_short_roll. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
ib_find_short_roll is provided by the Trading Skills MCP server (staskh/trading_skills). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Deterministic rules across all 35 Trading Skills tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.
Free to start. No card required.
35 Trading Skills tools catalogued and risk-classified — across an index of 42,500+ MCP servers.