btse_create_order · Btse MCP: Risk & Policy

WHAT IT DOES

What btse_create_order does on Btse

AI agents use btse_create_order to commit financial operations through Btse — usually the final step of a payment, billing, or trading workflow. A call moves real money.

WHY IT NEEDS A POLICY

Why btse_create_order needs a policy

This tool directly executes financial trades on the BTSE futures market, committing real financial obligations. Misuse could result in significant monetary losses through unintended or malicious order placement. Futures trading carries high financial risk, making this a critical-severity financial tool.

From the tool's definition Place a futures order. Supports LIMIT, MARKET, and OCO types.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

btse_create_order Approval-gated

Any call to btse_create_order is blocked until a human approves it. The rest of the server keeps working.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "btse_create_order": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

GATE THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Btse, so you can run agents against it safely.

FAQ

Questions about btse_create_order

What does the btse_create_order tool do? +

Place a futures order. Supports LIMIT, MARKET, and OCO types. It is categorised as a Financial tool in the Btse MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on btse_create_order? +

Register the Btse MCP server in PolicyLayer and add a rule for btse_create_order: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Btse. Nothing to install.

What risk level is btse_create_order? +

btse_create_order is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit btse_create_order? +

Yes. Add a rate_limit block to the btse_create_order rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block btse_create_order completely? +

Set action: deny in the PolicyLayer policy for btse_create_order. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides btse_create_order? +

btse_create_order is provided by the Btse MCP server (xbotlive/btse-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.