// SCAN REPORT

Refinore

24 tools. 10 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

10 can modify or destroy data

14 read-only

24 tools total

Community server · catalogue entry verified 30/06/2026

How to control Refinore ↓

TOOL MAP

What Refinore exposes to your agents

Read (14) Write / Execute (6) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Refinore tools

Financial · Critical execute_swap This tool performs an immediate financial transaction — swapping tokens using a real blockchain wallet. Financial · High create_swap_order This tool creates automated token swap orders on the Solana blockchain, which commits financial obligations by scheduling recurring or conditional trades. Destructive · High delete_strategy This tool irreversibly removes a user's saved mining strategy configuration. Destructive · High delete_swap_order This tool permanently removes a swap order record, which cannot be undone.

10 of Refinore's 24 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Refinore

PolicyLayer is an MCP gateway — it sits between your AI agents and Refinore, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "create_swap_order": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "delete_strategy": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "create_strategy": {
    "limits": [
      {
        "counter": "create_strategy_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_account_info": {
    "limits": [
      {
        "counter": "get_account_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Refinore — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON REFINORE →

Instant setup, no code required.

FULL CATALOGUE

All 24 Refinore tools

FINANCIAL 2 tools

Financial create_swap_order Create a DCA (dollar-cost averaging) or limit order for automated token swaps. DCA orders execute at regular i Financial execute_swap Execute a direct token swap immediately using the authenticated refinORE wallet.

DESTRUCTIVE 2 tools

Destructive delete_strategy Delete a saved auto-mining strategy by ID. Destructive delete_swap_order Delete an auto swap order by ID.

EXECUTE 3 tools

Execute start_mining Start a new ORE mining session on refinORE. Deploys SOL/USDC/ORE across squares on the mining grid. Configure Execute start_strategy Start mining using a saved strategy. Launches an auto-mining session with the strategy Execute stop_mining Stop an active ORE mining session. Optionally specify a session ID, or stop the current active session.

WRITE 3 tools

Write create_strategy Create a new auto-mining strategy with a name and mining parameters. Supports deterministic custom strategy sc Write edit_session Live-edit your active mining session between rounds WITHOUT stopping/restarting. Only send fields you want to Write live_edit_strategy Live-edit a mining strategy between rounds WITHOUT stopping the session. Only send the fields you want to chan

READ 14 tools

Read get_account_info Get your refinORE account info including Solana wallet address and deposit instructions. Call this first to di Read get_balances Get wallet token balances including SOL, ORE, USDC, stORE, and SKR for a given Solana wallet address. Read get_current_round Get the current mining round info — round number, time remaining, total deployed, motherlode, and expected val Read get_mining_history Get your past mining rounds history. Returns an array of completed mining rounds with results and earnings. Read get_mining_session Get the status of your current active mining session, including stats and current round info. Read get_rewards Get unclaimed rewards for a wallet — includes unclaimed SOL, unrefined ORE, and bonus ORE. Read get_round_history Get your personal mining round history — every round you deployed in with full details including tiles used, a Read get_staking_info Get staking information for a wallet — stORE balance, current APR, and pending staking rewards. Read get_swap_history Get your swap operations history — shows executed DCA buys, limit order fills, and swap results. Read get_tile_stats Get hot and cold tile statistics from the last N rounds. Shows which tiles (0-24) have won the most/least — us Read list_strategies List all your saved auto-mining strategies. Strategies define reusable mining configurations. Read list_swap_orders List all your auto swap orders (DCA and limit orders). Read quote_swap Preview a direct swap quote between any supported refinORE wallet tokens: SOL, USDC, ORE, stORE, and SKR. Read validate_strategy_script Validate a deterministic custom strategy script before saving it. Probes external JSON sources and returns pat

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Refinore

Can an AI agent move money through the Refinore MCP server? +

Yes. The Refinore server exposes 2 financial tools including create_swap_order, execute_swap. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Refinore MCP server? +

Yes. The Refinore server exposes 2 destructive tools including delete_strategy, delete_swap_order. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Refinore? +

The Refinore server has 3 write tools including create_strategy, edit_session, live_edit_strategy. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Refinore.

How many tools does the Refinore MCP server expose? +

24 tools across 4 categories: Destructive, Execute, Read, Write. 14 are read-only. 10 can modify, create, or delete data.

How do I enforce a policy on Refinore? +

Register the Refinore MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Refinore tool call.

Deterministic rules across all 24 Refinore tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON REFINORE →

Instant setup, no code required.

24 Refinore tools catalogued and risk-classified — across an index of 43,000+ MCP servers.