sell-stock · Kite MCP: Risk & Policy

WHAT IT DOES

What sell-stock does on KiteMCP

AI agents use sell-stock to commit financial operations through KiteMCP — usually the final step of a payment, billing, or trading workflow. A call moves real money.

WHY IT NEEDS A POLICY

Why sell-stock needs a policy

This tool directly executes real sell orders on Zerodha, a live stock trading platform. Selling stock constitutes a financial transaction that moves assets and commits financial obligations. The description explicitly states it 'executes the real order immediately,' meaning there is no confirmation step or reversibility.

From the tool's definition "Sell the stock using Zerodha. It executes the real order immediately."

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

sell-stock Approval-gated

Any call to sell-stock is blocked until a human approves it. The rest of the server keeps working.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "sell-stock": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

GATE THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches KiteMCP, so you can run agents against it safely.

FAQ

Questions about sell-stock

What does the sell-stock tool do? +

Sell the stock using Zerodha. It executes the real order immediately. It expects the stock name and quantity. It is categorised as a Financial tool in the KiteMCP MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on sell-stock? +

Register the Kite MCP server in PolicyLayer and add a rule for sell-stock: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches KiteMCP. Nothing to install.

What risk level is sell-stock? +

sell-stock is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit sell-stock? +

Yes. Add a rate_limit block to the sell-stock rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block sell-stock completely? +

Set action: deny in the PolicyLayer policy for sell-stock. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides sell-stock? +

sell-stock is provided by the Kite MCP server (utkarshagar2121/kitemcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.