// SCAN REPORT

Tenzro Ledger MCP

275 tools. 119 can modify or destroy data without limits.

46 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

119 can modify or destroy data

156 read-only

275 tools total

Community server · catalogue entry verified 30/06/2026

How to control Tenzro Ledger MCP ↓

TOOL MAP

What Tenzro Ledger MCP exposes to your agents

Read (156) Write / Execute (71) Destructive / Financial (46)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Tenzro Ledger MCP tools

Financial · High axelar_pay_gas This tool moves or commits financial resources (cryptocurrency gas fees) on behalf of the user. Financial · Critical create_payment_challenge Creating a payment challenge is a direct precursor to financial transactions—it establishes payment obligations or initiates fund movement workflows. Financial · Critical cross_vm_transfer This tool directly moves cryptocurrency or tokens between virtual machines (likely blockchains), which constitutes a financial transaction. Financial · High refund_escrow This tool moves money by refunding escrowed funds, which is a financial operation that commits to a specific monetary obligation.

119 of Tenzro Ledger MCP's 275 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Tenzro Ledger MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and Tenzro Ledger MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "attested_mint": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "clear_secure_mint_policy": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "authorize_session": {
    "limits": [
      {
        "counter": "authorize_session_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ap2_protocol_info": {
    "limits": [
      {
        "counter": "ap2_protocol_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Tenzro Ledger MCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON TENZRO LEDGER →

Instant setup, no code required.

FULL CATALOGUE

All 275 Tenzro Ledger MCP tools

FINANCIAL 36 tools

Financial attested_mint Mint a tokenized asset ONLY if post-mint supply <= attested reserves Financial axelar_pay_gas Pre-pay the Axelar Gas Service for a previously-dispatched message. Financial bridge_tokens Bridge tokens between Tenzro, Ethereum, Solana, or Base via LayerZero/CCIP/deBridge. Financial bridge_with_hook Bridge tokens with a post-delivery hook to execute a contract call on the destination chain. Financial capital_intent_execute Record one executed settlement leg ({venue, asset_id, side, quantity, Financial capital_intent_open capital_intent_open Financial capital_intent_quote Solver bid to fulfil a capital intent (ranked by ERC-8004 + KYA). Financial capital_intent_settle Release escrow to the solver, write ERC-8004 feedback, finalize. Financial capital_intent_verify Verify proofs / require all legs settled. Financial close_payment_channel Close a micropayment channel and settle the final balances on-chain. Financial compute_settle_epoch Settle one epoch of an active compute rental, gated on the availability proof. Financial create_escrow create_escrow Financial create_payment_challenge Create a payment challenge. protocol is 'mpp', 'x402', or 'native'. Financial cross_vm_transfer Perform an atomic cross-VM token transfer using the TNZO pointer model. Financial debridge_same_chain_swap Execute a same-chain token swap via deBridge without cross-chain bridging. Financial exchange_token exchange_token Financial fund_user_wallet Fund a user wallet from the app treasury. Financial onboard_autonomous_agent Onboard a fully autonomous agent — requires a slashable TNZO bond Financial open_payment_channel Open an off-chain micropayment channel with an initial deposit. Financial refund_escrow Refund escrowed funds back to the payer via a signed RefundEscrow transaction. Financial release_escrow Release escrowed funds to the payee via a signed ReleaseEscrow transaction. Financial request_faucet Request 100 testnet TNZO tokens from the faucet (24h cooldown per address). Financial secure_mint_apply Atomic check + circulating increment. Financial send_transaction send_transaction Financial set_bridge_fee_rate set_bridge_fee_rate Financial set_spending_limits Set daily and per-transaction spending limits for a wallet. Financial settle_payment Settle a payment between two addresses for a given service type. Financial sponsor_bridge_fee sponsor_bridge_fee Financial sponsor_transaction Sponsor a transaction for a user (app pays gas via paymaster). Financial stake_tokens Stake TNZO tokens as a Validator, ModelProvider, or TeeProvider. Financial storage_charge_epoch Run one proof-of-retrievability-gated charge epoch for a storage deal. Financial storage_open_deal Open a streaming storage deal for a stored object. Financial transfer_nft Transfer an NFT from one address to another. Financial verify_payment Verify a payment credential against a challenge and settle on-chain. Financial workflow_finalize Finalize a saga once all steps are Verified: compute the receipt hash and Financial workflow_step_compensate Compensate a saga step (refund vault -> payer). With cascade=True, also

DESTRUCTIVE 10 tools

Destructive clear_secure_mint_policy Clear the Secure-Mint policy for an asset. Destructive delete_model Delete a downloaded model from the local node. Destructive deregister_agent Deregister (suspend) an agent from the active network registry. Destructive forget_identity TDIP/GDPR Article 17 right-to-erasure. Hard-deletes a previously Destructive freeze_address Freeze an address for a specific token, preventing all transfers. Destructive revoke_did Revoke an identity by DID. Cascades JWT invalidation through the Destructive revoke_session Revoke an active session key for a wallet. Destructive secure_mint_record_burn Record a redemption (decrement circulating). Destructive urwa_clear_kill_switch (Admin) Clear the ERC-7943 kill-switch on a token. Transfers resume. Destructive urwa_trigger_kill_switch (Admin) Activate the ERC-7943 kill-switch on a token.

EXECUTE 25 tools

Execute assign_task Assign a task to a specific agent. Execute axelar_call_contract Dispatch an Axelar GMP call_contract message. Execute babylon_submit_finality_signature Submit an EOTS over a Tenzro block hash. Execute canton_submit_command Submit a DAML create or exercise command. Execute chat_completion Send a chat completion request to a served model and return the response. Execute chat_stream Send a chat completion request and stream the response token by token. Execute create_swarm Create a multi-agent swarm with the specified number of members. Execute deploy_contract Deploy bytecode to the EVM, SVM, or DAML runtime. Execute derive_key Derive a child key from a seed using the given derivation path. Execute encode_function ABI-encode a smart contract function call. Returns hex-encoded calldata. Execute encrypt_data Encrypt data using AES-256-GCM. Returns ciphertext with nonce and tag. Execute hyperlane_dispatch Dispatch a Hyperlane V3 message through the canonical Mailbox. Execute rotate_validator_key rotate_validator_key Execute send_agent_message Send a message from one agent to another via the A2A protocol. Execute serve_model Start serving a model for inference on this node. Execute sign_message Sign a message with the auth-bound wallet (FROST-Ed25519 + ML-DSA-65 hybrid). Execute spawn_agent Spawn a child agent from a parent identity with a specific role. Execute stop_model Stop serving a model on this node. Execute submit_daml_create Submit a DAML create command on the shared Canton domain. Execute submit_daml_exercise Submit a DAML exercise command on an existing contract. Execute use_registered_tool Invoke a registered tool with the given input data. Execute use_skill Invoke a registered skill with the given input data. Execute workflow_open Open a multi-agent saga workflow. saga_steps is a list of Execute workflow_step_execute Execute a saga step (Pending -> Executing). If escrow_amount is set, Execute x25519_key_exchange Perform X25519 Diffie-Hellman key exchange. Returns shared secret.

WRITE 46 tools

Write authorize_session Create a time-limited session key for automated transactions. Write babylon_register_finality_provider Register a Tenzro validator as a Babylon finality provider. Write cancel_task Cancel a task in the marketplace. Write canton_grant_user_rights canton_grant_user_rights Write canton_upload_dar Upload a DAR (DAML Archive) to the participant via POST /v2/packages Write capital_intent_assign Assign a solver. Omit solver_did or pass auto=True to auto-rank received Write complete_task Mark a task as complete with the result data. Write compute_set_pricing Set the per-epoch compute pricing policy. Write create_mpc_wallet Create a FROST-Ed25519 (RFC 9591) threshold wallet with the specified threshold and share count. Write create_nft_collection Create a new NFT collection. nft_type is 'erc721' or 'erc1155'. Write create_token Create a new ERC-20 token via the factory and register it in the unified registry. Write create_user_wallet Create a custodial FROST-Ed25519 (RFC 9591) wallet for an app user. The app manages the key shares. Write create_wallet create_wallet Write create_zk_proof create_zk_proof Write debridge_create_tx Create a cross-chain transaction via deBridge DLN. Returns transaction data ready for signing. Write eip7702_build_designator Build the 23-byte EIP-7702 designator Write generate_keypair Generate a new cryptographic keypair (ed25519 or secp256k1). Returns public and private key hex. Write import_keystore Import a wallet from an encrypted keystore file. Write join_as_participant Join the Tenzro network as a participant. Provisions identity, wallet, and hardware profile. Write link_wallet_for_auth link_wallet_for_auth Write mint_nft Mint a new NFT in a collection to a recipient address. Write moe_plan_dispatch Plan the per-holder dispatch for a list of per-token top-k routings. Write onboard_delegated_agent Onboard an agent that acts on behalf of controller_did. Write post_task Post a new task to the task marketplace. Write rate_template Rate an agent template (1-5 stars) with an optional text review. Write register_agent Register a new AI agent with the specified capabilities. Write register_agent_template register_agent_template Write register_app Register an application to use Tenzro custody and wallet services. Write register_compliance Register compliance rules for a token (KYC requirement, holder limits). Write register_identity Register a new TDIP identity. identity_type is 'human' or 'machine'. Write register_nft_pointer Register a cross-VM pointer for an NFT collection. Write register_provider Register as a network provider with a service endpoint. Write register_skill Register a new skill in the skills registry. Write register_tool Register a new tool (MCP server endpoint) in the tools registry. Write register_webhook Register a webhook URL to receive event notifications. Write set_delegation_scope Set spending limits and allowed operations for a machine DID. Write set_secure_mint_policy Set or update a Secure-Mint policy. Enforces Write set_sponsorship_refill_threshold (Operator admin-token-gated) Set per-adapter pool refill threshold. Write set_username Set a human-readable username for a DID. Write storage_set_pricing Set the byte-epoch storage pricing policy. Write storage_store_object Store an object on this node's storage provider with erasure coding. Write submit_reserve_attestation Record a signed reserve attestation backing a tokenized asset (PoR): Write terminate_swarm Terminate an agent swarm and release all members. Write urwa_set_frozen_tokens (Admin) Freeze a specific amount on an ERC-7943 token account. Write vote_on_proposal Vote on a governance proposal. vote is 'for', 'against', or 'abstain'. Write workflow_set_step_deadline workflow_set_step_deadline

READ 156 tools

Read ap2_protocol_info Return AP2 protocol metadata: version, signing algorithm, mandate kinds, Read ap2_sign_mandate ap2_sign_mandate Read ap2_validate_mandate_pair ap2_validate_mandate_pair Read ap2_verify_mandate Verify the Ed25519 signature on a Vdc-wrapped AP2 mandate (checkout or payment). Read attested_clock_now attested_clock_now Read axelar_get_message Look up an Axelar GMP message by payload hash. Read axelar_list_chains List supported Axelar chains. Read babylon_get_finality_provider Read the Babylon finality-provider record for a Tenzro validator. Read babylon_list_delegations List BTC delegations for a finality provider. Read babylon_list_finality_providers List every registered Babylon finality provider. Read babylon_total_stake_for_provider Sum BTC delegations for a finality provider. Read bridge_quote Get a fee quote for bridging tokens between two chains. Read caip10 Get the CAIP-10 account id. Accepts hex or base58btc; Read caip19 Get the CAIP-19 asset id. kind is one of slip44 / Read caip2 Get the CAIP-2 chain id for this node: Read canton_allocate_party canton_allocate_party Read canton_coin_balance Returns the Canton Coin (CIP-56) balance for the participant's Read canton_connected_synchronizers canton_connected_synchronizers Read canton_fee_schedule Returns the participant's Canton fee schedule sourced from the Read canton_get_my_analytics canton_get_my_analytics Read canton_get_my_user canton_get_my_user Read canton_get_transaction Fetch a Canton transaction tree by update id. The update id must Read canton_health Combined health probe — /livez, /readyz, /v2/version. Returns Read canton_list_api_key_analytics canton_list_api_key_analytics Read canton_list_contracts Query active DAML contracts. template_ids must contain at least one Read canton_list_domains List the Canton synchronizer domains this node is configured against. Read canton_list_packages List every DAML package installed on the participant via Read canton_list_parties List every party known to the participant via GET /v2/parties/known. Read canton_list_user_rights List the rights granted to a Canton user via Read canton_version Returns participant version + CIP feature flags via GET /v2/version Read capital_intent_compensate Refund the principal escrow and fail the intent (saga compensation). Read check_compliance Check if a token transfer complies with registered compliance rules. Read compute_book_rental Book a fixed-term compute rental against this provider. Read compute_get_rental Look up a compute rental by its id. Read compute_status Return a summary of this node's compute-rental state. Read debridge_get_chains Get all blockchain networks supported by deBridge DLN for cross-chain transfers. Read debridge_get_instructions Get deBridge operational instructions and guidance for cross-chain transfers. Read debridge_search_tokens Search for tokens available on deBridge DLN. Returns token addresses, symbols, and supported chains. Read decode_result ABI-decode the return data from a smart contract call. Read decrypt_data Decrypt AES-256-GCM encrypted data. Input must include nonce and tag. Read detect_tee Detect available TEE hardware on the current node (TDX, SEV-SNP, Nitro, GPU CC). Read discover_models Discover models available on the network with optional price filtering. Read download_model Download a model from the registry to the local node. Read eip7702_parse_designator Decode account code and extract the delegate address if it's Read eip7702_protocol_info Read static metadata about the EIP-7702 support surface. Read eip7702_signing_hash Compute the secp256k1 signing hash for an EIP-7702 authorization Read export_keystore Export an encrypted keystore file (Argon2id KDF) for a wallet address. Read get_agent_info Get detailed information about a specific agent. Read get_agent_template Get details of a specific agent template. Read get_balance Get the TNZO token balance for a hex address. Returns the balance in wei. Read get_block Get a block by height with its transactions and metadata. Read get_block_range get_block_range Read get_bridge_analytics Subject self-read of the caller's own Chainlink/bridge analytics. Read get_bridge_routes Get available bridge routes between two chains with fees and timing. Read get_capital_intent Read a capital intent record (status, quotes, legs, escrow, receipt). Read get_download_progress Check the download progress of a model. Read get_escrow Inspect an escrow record by its 32-byte hex id. Read get_events Get blockchain events with optional block range and type filters. Read get_fee_history get_fee_history Read get_gas_price Returns the current effective gas price in wei (base fee + suggested tip). Read get_hardware_profile Detect and return the hardware profile of the local node (CPU, RAM, GPU, TEE). Read get_key_shares Get the FROST-Ed25519 secret share configuration for a wallet (threshold, total, share indices). Read get_max_priority_fee_per_gas Returns a suggested EIP-1559 priority fee (tip) in wei. Read get_nft_info Get info about an NFT collection or a specific token within it. Read get_node_status Get the current node status including block height, peer count, uptime, and role. Read get_provider_stats Get provider statistics: served models, inferences, staking totals. Read get_reserve Read the current reserve attestation for a tokenized asset. Read get_secure_mint_policy Read the Secure-Mint policy for an asset. Read get_skill Get details of a specific skill by its ID. Read get_skill_usage Get usage statistics for a registered skill. Read get_spending_limits Get the current spending limits and usage for a wallet. Read get_svm_cross_vm_program_info get_svm_cross_vm_program_info Read get_swarm_status Get the current status and member list of an agent swarm. Read get_task Get details of a specific task by its ID. Read get_tee_attestation Get a TEE attestation quote from the specified provider (auto, tdx, sev-snp, nitro, gpu). Read get_template_stats Get usage statistics for an agent template. Read get_token_balance Get TNZO balance across all VMs with decimal conversion. Read get_token_info Look up a token by symbol, EVM address, or token ID. Read get_tool_info Get details of a specific registered tool by its ID. Read get_tool_usage Get usage statistics for a registered tool. Read get_transaction_receipt Look up a transaction receipt by its hash. Returns sender, recipient, status, gas used, and logs. Read get_usage_stats Get usage statistics for an application (wallets, transactions, gas spent). Read get_validator_state Fetch a single validator's registry entry by 32-byte hex address. Read get_voting_power Get the voting power for an address based on staked TNZO. Read get_workflow_saga Read a saga workflow's current state (steps, statuses, escrows, receipt). Read hash_keccak256 Compute Keccak-256 hash of hex-encoded data. Read hash_sha256 Compute SHA-256 hash of hex-encoded data. Read hyperlane_get_message Look up a Hyperlane message by id. Read hyperlane_list_chains List supported Hyperlane chains and their canonical domain ids. Read hyperlane_quote_dispatch Quote the interchain gas payment for a dispatch. Read introspect_token introspect_token Read ivms101_canonical_hash ivms101_canonical_hash Read list_active_validators List only currently-Active validators (those producing blocks). Read list_agent_templates List available agent templates. Optionally filter by type. Read list_agents List all registered agents on the network. Read list_bridge_adapters List registered bridge adapters (LayerZero, CCIP, deBridge, Canton). Read list_bridge_analytics list_bridge_analytics Read list_bridge_sponsorship_pools list_bridge_sponsorship_pools Read list_canton_domains List Canton synchronizer domains configured on this node. Read list_daml_contracts Query active DAML contracts on the shared Canton domain. Read list_model_endpoints List active model service endpoints with their API/MCP URLs and status. Read list_models List available AI models. Optionally filter by category or name. Read list_nft_collections List NFT collections. Optionally filter by creator address. Read list_payment_protocols List supported payment protocols (MPP, x402, native) and their capabilities. Read list_proposals List active governance proposals. Read list_providers List registered providers. Optionally filter by type (Validator, ModelProvider, TeeProvider). Read list_registered_tools List all registered MCP tools in the tools registry. Read list_skills List all registered skills in the Tenzro skills registry. Read list_tasks List tasks in the marketplace. Optionally filter by type or status. Read list_tee_providers List registered TEE providers on the network with their attestation status. Read list_tokens List registered tokens with optional VM type filter (evm, svm, daml). Read list_user_wallets List all user wallets managed by an application. Read list_validators List validators in the registry, optionally filtered by status. Read list_x402_schemes list_x402_schemes Read list_zk_circuits List available ZK circuits (inference, settlement, identity — all Plonky3 STARKs over KoalaBear). Read local_peers Return peer IDs discovered on this node's local network segment via mDNS. Read moe_catalog_shape Return the catalog-side MoE topology for a model. Read moe_replication_policy Return the current replication policy used by shard-view consumers. Read moe_shard_map Return the expert-shard map for a MoE model across known providers. Read node_profile Return the local node's hardware self-profile and derived serving values. Read node_reachability Return this node's sustained connectivity tier. Read oauth_discovery oauth_discovery Read onboard_human onboard_human Read permit2_digest Compute the EIP-712 digest a user signs for a Permit2 Read permit2_domain_separator Read the per-chain Permit2 EIP-712 domain separator. Read permit2_nonce_used Check whether a (owner, nonce) slot has been consumed. Read permit2_verify_and_consume Atomically verify a signed Permit2 message and consume the Read quote_bridge_fee_in_tnzo quote_bridge_fee_in_tnzo Read quote_task Submit a quote for a task with a proposed price and model. Read refresh_token refresh_token Read resolve_did Resolve a DID to its identity info and delegation scope. Read resolve_username Resolve a username to its associated DID and identity info. Read rotate_keys Rotate the FROST-Ed25519 secret shares for a wallet without changing the address. Read seal_data Seal data inside a TEE enclave using hardware-bound encryption. Read search_agent_templates Search agent templates by name or description. Read search_skills Search the skills registry by keyword or tag. Read search_tools Search the tools registry by keyword. Read secure_mint_check Read-only invariant check for a proposed mint. Read signed_agent_card_canonical_hash signed_agent_card_canonical_hash Read spawn_from_template spawn_from_template Read storage_get_deal Look up a storage deal by its id. Read storage_status Return a summary of this node's storage-provider state. Read subscribe_events Subscribe to real-time blockchain events matching a filter expression. Read subscribe_events_stream Subscribe to real-time blockchain events. Returns a subscription ID for streaming. Read token_balance Get the TNZO token balance for an address via the token subsystem. Read total_supply Get the total TNZO token supply. Read unseal_data Unseal TEE-sealed data. Only works on the same hardware that sealed it. Read unstake_tokens Unstake TNZO tokens and initiate the unbonding period. Read urwa_get_frozen_tokens Read the ERC-7943 frozen-amount for a (token, account) pair. Read verify_did_envelope Verify a Tenzro DID envelope passed as a hex header value (the Read verify_signature Verify a signature against a message and public key. Read verify_tee_attestation_rpc Verify a TEE attestation quote via RPC. Returns verification result and measurements. Read verify_zk_proof Verify a Plonky3 STARK proof over the KoalaBear field. Read workflow_step_verify Verify a saga step (Executing -> Verified): release any per-step escrow Read wormhole_ntt_list_chains wormhole_ntt_list_chains Read wrap_tnzo Wrap native TNZO to its VM representation for an address/amount.

OTHER 2 tools

Other cluster_plan cluster_plan Other urwa_is_kill_switched urwa_is_kill_switched

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Tenzro Ledger MCP

Can an AI agent move money through the Tenzro Ledger MCP server? +

Yes. The Tenzro Ledger MCP server exposes 36 financial tools including attested_mint, axelar_pay_gas, bridge_tokens. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Tenzro Ledger MCP server? +

Yes. The Tenzro Ledger MCP server exposes 10 destructive tools including clear_secure_mint_policy, delete_model, deregister_agent. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Tenzro Ledger MCP? +

The Tenzro Ledger MCP server has 46 write tools including authorize_session, babylon_register_finality_provider, cancel_task. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Tenzro Ledger MCP.

How many tools does the Tenzro Ledger MCP server expose? +

275 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 156 are read-only. 119 can modify, create, or delete data.

How do I enforce a policy on Tenzro Ledger MCP? +

Register the Tenzro Ledger MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.