// SCAN REPORT

TheProtocol — Sovereign AI Agent Platform

380 tools. 107 can modify or destroy data without limits.

27 destructive tools with no built-in limits. Policy required.

Last updated:

107 can modify or destroy data
273 read-only
380 tools total

107 TheProtocol — Sovereign AI Agent Platform tools can modify or destroy data, with no limits today. PolicyLayer puts allow, deny, and rate-limit rules on every call. Live in minutes.

SECURE THEPROTOCOL — SOVEREIGN AI AGENT PLATFORM →

Free to start. No card required.

TOOL MAP

Read (273) Write / Execute (80) Destructive / Financial (27)

CONTEXT-WINDOW COST

22,805 tokens of tool definitions, loaded on every request
11% of a 200k context window
199 heaviest tool: theprotocol_createProposal

Full per-tool breakdown → Model it in the token calculator →

WHAT CAN GO WRONG

✕

Financial operations (theprotocol_bridgeTransfer, theprotocol_depositReputationBond, theprotocol_finalizeFrameInvitation) can move real money. An agent caught in a loop could drain accounts before anyone notices.

✕

Destructive tools (theprotocol_agentRevokeAttestation, theprotocol_authForgotPassword, theprotocol_authResetPassword) permanently delete resources. There is no undo. An agent calling these in a retry loop causes irreversible damage.

✕

Write operations (theprotocol_activateOperator, theprotocol_activateVersion, theprotocol_addTeamMember) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

✕

Execute tools (theprotocol_authorizePayment, theprotocol_operatorPortalSelfRestart, theprotocol_reverifyAttestation) trigger processes with side effects. Builds, notifications, workflows — all fired without throttling.

RECOMMENDED RULES

Block financial tools by default
{
  "theprotocol_bridgeTransfer": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "theprotocol_agentRevokeAttestation": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "theprotocol_activateOperator": {
    "limits": [
      {
        "counter": "theprotocol_activateoperator_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "theprotocol_acceptContract": {
    "limits": [
      {
        "counter": "theprotocol_acceptcontract_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Get this policy live on your own TheProtocol — Sovereign AI Agent Platform server in minutes. Tune the limits to your setup; PolicyLayer enforces it on every call.

ENFORCE ON MY THEPROTOCOL — SOVEREIGN AI AGENT PLATFORM →

ALL 380 THEPROTOCOL — SOVEREIGN AI AGENT PLATFORM TOOLS

FINANCIAL 6 tools
Financial theprotocol_bridgeTransfer Financial theprotocol_depositReputationBond Financial theprotocol_finalizeFrameInvitation Financial theprotocol_tegCrossRegistryTransferDirect Financial theprotocol_tegSystemTransfer Financial theprotocol_transferTokens
DESTRUCTIVE 21 tools
Destructive theprotocol_agentRevokeAttestation Destructive theprotocol_authForgotPassword Destructive theprotocol_authResetPassword Destructive theprotocol_cancelAccountDeletion Destructive theprotocol_deleteBundle Destructive theprotocol_deleteFederationPeerSelf Destructive theprotocol_deleteMyAgent Destructive theprotocol_deleteMyAgentByDev Destructive theprotocol_deleteMyApiKey Destructive theprotocol_deleteOrganization Destructive theprotocol_deleteOrganizationTeam Destructive theprotocol_deletePipeline Destructive theprotocol_deleteTegPolicy Destructive theprotocol_deleteVersion Destructive theprotocol_deleteWebhook Destructive theprotocol_releasePayment Destructive theprotocol_removeOrganizationMember Destructive theprotocol_removeTeamMember Destructive theprotocol_requestAccountDeletion Destructive theprotocol_resetAgentCredentialsOnboard Destructive theprotocol_revokeApiKey
EXECUTE 8 tools
Execute theprotocol_authorizePayment Execute theprotocol_operatorPortalSelfRestart Execute theprotocol_reverifyAttestation Execute theprotocol_rollbackVersion Execute theprotocol_tallyProposal Execute theprotocol_triggerDeployment Execute theprotocol_triggerFederationSync Execute theprotocol_triggerManualDistribution
WRITE 72 tools
Write theprotocol_activateOperator Write theprotocol_activateVersion Write theprotocol_addTeamMember Write theprotocol_agentBuilderGenerate Write theprotocol_agentBuilderGenerateTemplate Write theprotocol_agentBulkExport Write theprotocol_agentHeartbeat Write theprotocol_applyReputationSignal Write theprotocol_approveContractCompletion Write theprotocol_approveDisputeSettlement Write theprotocol_assignAgentToOrg Write theprotocol_authRegister Write theprotocol_authSetNewPassword Write theprotocol_castVote Write theprotocol_createAgent Write theprotocol_createApiKey Write theprotocol_createArenaMatch Write theprotocol_createAttestationSchedule Write theprotocol_createBundle Write theprotocol_createDeveloperApikeyMe Write theprotocol_createFederationPeer Write theprotocol_createFrameInvitation Write theprotocol_createMalpracticeDispute Write theprotocol_createOrganization Write theprotocol_createOrganizationTeam Write theprotocol_createPipeline Write theprotocol_createProposal Write theprotocol_createTegPoliciesBatch Write theprotocol_createTegPolicy Write theprotocol_createVersion Write theprotocol_createWebhook Write theprotocol_disableMyAttestationSchedule Write theprotocol_disableMyMtls Write theprotocol_enableMtls Write theprotocol_exportAgentDev Write theprotocol_exportTegTransactions Write theprotocol_federationSyncRequest Write theprotocol_federationVoteProposal Write theprotocol_importAgent Write theprotocol_inviteOrganizationMember Write theprotocol_markContractFailed Write theprotocol_markNotificationRead Write theprotocol_moveFlare Write theprotocol_patchBundle Write theprotocol_rejectDisputeSettlement Write theprotocol_resolveTegDispute Write theprotocol_restoreBundle Write theprotocol_restoreFromUpload Write theprotocol_selectFlare Write theprotocol_setFlareCornerVariant Write theprotocol_setFlareOverlay Write theprotocol_setFlareVariant Write theprotocol_submitAttestation Write theprotocol_submitContractWork Write theprotocol_submitContractWorkFederated Write theprotocol_submitDispute Write theprotocol_submitDisputeEvidence Write theprotocol_submitFundingRequest Write theprotocol_submitOnboardRegister Write theprotocol_submitSupportTicket Write theprotocol_submitTegAttestation Write theprotocol_updateAutoCompound Write theprotocol_updateDeploymentStatus Write theprotocol_updateFederationPeer Write theprotocol_updateMyDeveloperLocation Write theprotocol_updateMyDeveloperProfile Write theprotocol_updateOrganization Write theprotocol_updateOrganizationTeam Write theprotocol_updatePeerSlashConfig Write theprotocol_updatePipeline Write theprotocol_updateTegPolicy Write theprotocol_updateWebhook
READ 273 tools
Read theprotocol_acceptContract Read theprotocol_acceptContractFederated Read theprotocol_acceptOrgInvitation Read theprotocol_appendDeploymentLogs Read theprotocol_authRecover2FA Read theprotocol_authRecoverAccount Read theprotocol_authRefresh Read theprotocol_authResendVerification Read theprotocol_authValidate2FA Read theprotocol_authVerifyEmail Read theprotocol_changePassword Read theprotocol_claimPendingAchievements Read theprotocol_claimStakingRewards Read theprotocol_claimTegRewards Read theprotocol_cloneAgent Read theprotocol_crossRegistryContractProxy Read theprotocol_crossTegBalanceSync Read theprotocol_customizeFlare Read theprotocol_disable2FASelf Read theprotocol_discoverAgents Read theprotocol_discoverRegistries Read theprotocol_downloadBundle Read theprotocol_downloadBundleViaOnboard Read theprotocol_downloadPipelineTemplate Read theprotocol_equipFlare Read theprotocol_estimateMyStakingRewards Read theprotocol_federationProposeRaise Read theprotocol_federationSlashConfirmation Read theprotocol_federationSlashRequest Read theprotocol_federationVetoProposal Read theprotocol_flareCelebrationAcknowledge Read theprotocol_forkBundle Read theprotocol_getAchievementCatalog Read theprotocol_getActivityFeedByType Read theprotocol_getAgentANP Read theprotocol_getAgentAttestationsByDID Read theprotocol_getAgentAttestationSchedulesByDID Read theprotocol_getAgentByDID Read theprotocol_getAgentByDIDAlt Read theprotocol_getAgentCardByHRI Read theprotocol_getAgentCardByHumanReadableId Read theprotocol_getAgentCardById Read theprotocol_getAgentCardExport Read theprotocol_getAgentContracts Read theprotocol_getAgentDIDDoc Read theprotocol_getAgentFlare Read theprotocol_getAgentLocations Read theprotocol_getAgentLocationsEmissionPolicies Read theprotocol_getAgentLocationsOperator Read theprotocol_getAgentLocationsTrustedRegistries Read theprotocol_getAgentMetrics Read theprotocol_getAgentPendingRewards Read theprotocol_getAgentProfile Read theprotocol_getAgentPublicKey Read theprotocol_getAgentReputation Read theprotocol_getAgentRewardsHistory Read theprotocol_getAgentStakingBalance Read theprotocol_getAgentStakingHistory Read theprotocol_getAgentTemplate Read theprotocol_getAgentToken Read theprotocol_getAgentTransactionHistory Read theprotocol_getApyRates Read theprotocol_getArenaAgentStats Read theprotocol_getArenaLeaderboard Read theprotocol_getArenaMatch Read theprotocol_getArenaMatchBets Read theprotocol_getArenaMatchMap Read theprotocol_getAttestationBundle Read theprotocol_getAttestationDetail Read theprotocol_getAttestationHealth Read theprotocol_getAttestationSigningPubkey Read theprotocol_getAuthProfile Read theprotocol_getAuthRegistrationConfig Read theprotocol_getAutoCompoundForAgent Read theprotocol_getAutoTallyConfig Read theprotocol_getBatchAgentBalances Read theprotocol_getBundleManifest Read theprotocol_getCircuitACIR Read theprotocol_getCircuitNargoToml Read theprotocol_getCircuits Read theprotocol_getCircuitSource Read theprotocol_getCommunityAnnouncements Read theprotocol_getContractById Read theprotocol_getCrossFrameReputation Read theprotocol_getDeployment Read theprotocol_getDeveloperFlare Read theprotocol_getDeveloperStats Read theprotocol_getDeveloperWebhookDeliveriesAlt Read theprotocol_getDevTrustGraph Read theprotocol_getDisputeById Read theprotocol_getDownloadsManifest Read theprotocol_getFeaturedBundles Read theprotocol_getFederationDisputeSettlement Read theprotocol_getFederationDisputeSettlements Read theprotocol_getFederationHealthCheck Read theprotocol_getFederationInfo Read theprotocol_getFederationNetworkStats Read theprotocol_getFederationPeerByID Read theprotocol_getFederationPolicyCompliance Read theprotocol_getFederationRegistryHealthProfile Read theprotocol_getFederationSyncStatusDev Read theprotocol_getFeeCurrentRate Read theprotocol_getFiatProviders Read theprotocol_getFiatPurchaseSession Read theprotocol_getFiatQuote Read theprotocol_getFiatStatsPublic Read theprotocol_getFiatTiers Read theprotocol_getGovernanceProposals Read theprotocol_getMcpStdioBridgeAdminJs Read theprotocol_getMcpStdioBridgeJs Read theprotocol_getMy2FAStatus Read theprotocol_getMyA2APaymentTokens Read theprotocol_getMyAchievements Read theprotocol_getMyAgentBalance Read theprotocol_getMyAgentBundles Read theprotocol_getMyAgentCicdStats Read theprotocol_getMyAgentDisputes Read theprotocol_getMyAgentHealth Read theprotocol_getMyAgentInfo Read theprotocol_getMyAgentLogs Read theprotocol_getMyAgents Read theprotocol_getMyApiKeyDetail Read theprotocol_getMyApiKeys Read theprotocol_getMyAutoCompound Read theprotocol_getMyBalance Read theprotocol_getMyCicdDeployments Read theprotocol_getMyCicdPipelines Read theprotocol_getMyCicdVersions Read theprotocol_getMyContracts Read theprotocol_getMyDeletionStatus Read theprotocol_getMyDeveloperActivity Read theprotocol_getMyDeveloperActivityEventstore Read theprotocol_getMyDeveloperJwks Read theprotocol_getMyDeveloperProfile Read theprotocol_getMyDeveloperTegSummary Read theprotocol_getMyDisputes Read theprotocol_getMyEarnings Read theprotocol_getMyEnforcementStatus Read theprotocol_getMyFederationRegistrations Read theprotocol_getMyFiatPurchases Read theprotocol_getMyFlareStatus Read theprotocol_getMyFundingRequests Read theprotocol_getMyMcpAuditLog Read theprotocol_getMyMtlsStatus Read theprotocol_getMyNotificationPrefs Read theprotocol_getMyOrganizations Read theprotocol_getMyReputationBondStatus Read theprotocol_getMyRewardHistory Read theprotocol_getMySigningKeys Read theprotocol_getMyStakes Read theprotocol_getMyStakeStats Read theprotocol_getMyStakingHistory Read theprotocol_getMyStakingStatus Read theprotocol_getMySupportTickets Read theprotocol_getMyTegBalance Read theprotocol_getMyTegDisputes Read theprotocol_getMyTegTransactions Read theprotocol_getMyTreasuryBalance Read theprotocol_getMyUnreadNotifications Read theprotocol_getMyVoteOnProposal Read theprotocol_getMyVotingPower Read theprotocol_getMyWebhooks Read theprotocol_getNetworkHealth Read theprotocol_getNetworkStats Read theprotocol_getOAuthFederationStatus Read theprotocol_getOperatorMyBundle Read theprotocol_getOperatorMyLifecycle Read theprotocol_getOperatorMyStatus Read theprotocol_getOrganization Read theprotocol_getOrganizationBySlug Read theprotocol_getOrganizationCicdSummary Read theprotocol_getOrganizationTeam Read theprotocol_getPeerSlashConfig Read theprotocol_getPipelineTemplates Read theprotocol_getProposalDetail Read theprotocol_getProposalVotes Read theprotocol_getPublicEventStoreRecent Read theprotocol_getPublicEventStoreStats Read theprotocol_getPublicEventStoreStatsB Read theprotocol_getPublicRegistryConfig Read theprotocol_getPublicShowcaseAgents Read theprotocol_getPublicShowcaseCall Read theprotocol_getRegistryCard Read theprotocol_getRegistryFederationProposals Read theprotocol_getRelayStatus Read theprotocol_getReputationComputationStatus Read theprotocol_getRevokedIdentities Read theprotocol_getSpireJWKS Read theprotocol_getStackHealth Read theprotocol_getStakingApyTiersTeg Read theprotocol_getStakingDistributionRecords Read theprotocol_getStakingDistributions Read theprotocol_getStakingDistributionStats Read theprotocol_getStakingGlobalStats Read theprotocol_getSupportedWebhookEvents Read theprotocol_getSupportTicketDetail Read theprotocol_getSystemActivityFeed Read theprotocol_getTegAdvancedTransactions Read theprotocol_getTegAttestations Read theprotocol_getTegDisputeDetail Read theprotocol_getTegPoliciesComplianceDashboard Read theprotocol_getTegPolicy Read theprotocol_getTegPrice Read theprotocol_getTegReputationRankings Read theprotocol_getTegTransactionDetail Read theprotocol_getTokenomicsRewards Read theprotocol_getTokenomicsTransactions Read theprotocol_getTokenomicsTreasury Read theprotocol_getTransactionsAnalytics Read theprotocol_getTrustScore Read theprotocol_getVolumeProfile Read theprotocol_getWebhook Read theprotocol_getWebhookDeliveries Read theprotocol_getWellKnownDevJwks Read theprotocol_getWellKnownRegistryCard Read theprotocol_listAgentBuilderTemplates Read theprotocol_listAgentCards Read theprotocol_listAgentTemplates Read theprotocol_listArenaMatches Read theprotocol_listDeveloperApikeysMe Read theprotocol_listDeveloperWebhooks Read theprotocol_listDeveloperWebhooksAlt Read theprotocol_listFederationAgentCards Read theprotocol_listFederationPeers Read theprotocol_listFederationRegistries Read theprotocol_listFederationRegistryCards Read theprotocol_listMyAttestations Read theprotocol_listMyAttestationSchedules Read theprotocol_listOrganizationAgents Read theprotocol_listOrganizationMembers Read theprotocol_listOrganizationTeams Read theprotocol_listPublicOperatorApplications Read theprotocol_listTegPolicies Read theprotocol_logEnhancedDispute Read theprotocol_logoutSession Read theprotocol_logTegDispute Read theprotocol_mcpPassthroughGetAgentProfile Read theprotocol_oauthIntrospect Read theprotocol_oauthTokenExchange Read theprotocol_operatorPortalSelfLogs Read theprotocol_previewAdminEmailText Read theprotocol_previewAdminEmailWithContext Read theprotocol_previewSlashReductionAttestation Read theprotocol_previewVotingPowerAttestation Read theprotocol_purchasePipelineTemplate Read theprotocol_rateBundle Read theprotocol_recordAchievement Read theprotocol_regenerateBackupCodes Read theprotocol_relayAction Read theprotocol_releasePaymentById Read theprotocol_replySupportTicket Read theprotocol_reportBundle Read theprotocol_requestFrame Read theprotocol_requestSelfRevocation Read theprotocol_rotateFederationLicenseSelf Read theprotocol_rotateMySigningKey Read theprotocol_selfProvisionOperator Read theprotocol_settlePayment Read theprotocol_setup2FA Read theprotocol_stakeTokens Read theprotocol_tegReputationSignalToken Read theprotocol_tegStakeDirect Read theprotocol_tegUnstakeDirect Read theprotocol_testDeveloperWebhookAlt Read theprotocol_testWebhook Read theprotocol_unassignAgentFromOrg Read theprotocol_unequipFlare Read theprotocol_unstakeTokens Read theprotocol_validateAgentCard Read theprotocol_validateAgentImport Read theprotocol_verify2FA Read theprotocol_verifyPayment Read theprotocol_verifyPublicAttestationBundle

FAQ

Can an AI agent move money through the TheProtocol — Sovereign AI Agent Platform MCP server? +

Yes. The TheProtocol — Sovereign AI Agent Platform server exposes 6 financial tools including theprotocol_bridgeTransfer, theprotocol_depositReputationBond, theprotocol_finalizeFrameInvitation. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the TheProtocol — Sovereign AI Agent Platform MCP server? +

Yes. The TheProtocol — Sovereign AI Agent Platform server exposes 21 destructive tools including theprotocol_agentRevokeAttestation, theprotocol_authForgotPassword, theprotocol_authResetPassword. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through TheProtocol — Sovereign AI Agent Platform? +

The TheProtocol — Sovereign AI Agent Platform server has 72 write tools including theprotocol_activateOperator, theprotocol_activateVersion, theprotocol_addTeamMember. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach TheProtocol — Sovereign AI Agent Platform.

How many tools does the TheProtocol — Sovereign AI Agent Platform MCP server expose? +

380 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 273 are read-only. 107 can modify, create, or delete data.

How do I enforce a policy on TheProtocol — Sovereign AI Agent Platform? +

Register the TheProtocol — Sovereign AI Agent Platform MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies for each. Same risk classification, live on your fleet in minutes.

0nmcp 407 tools
paymentsadminautomation
Aibtc 327 tools
paymentsadminautomation
SpaceMolt 182 tools
paymentsadminautomation
Agent Passport System — Cryptographic Identity for AI Agents 150 tools
paymentsadminautomation
Xdevplatform/xmcp 135 tools
paymentsadminautomation
MiOffice — AI-Powered Workspace Studio 133 tools
paymentsadminautomation
Fleet 132 tools
paymentsadminautomation
Hiveagent 122 tools
paymentsadminautomation

Enforce policy on every TheProtocol — Sovereign AI Agent Platform tool call.

Deterministic rules across all 380 TheProtocol — Sovereign AI Agent Platform tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

SECURE THEPROTOCOL — SOVEREIGN AI AGENT PLATFORM →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.