// SCAN REPORT

PortalMCP

17 tools. 13 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 1 Jul 2026

13 can modify or destroy data

4 read-only

17 tools total

Community server · catalogue entry verified 01/07/2026

How to control PortalMCP ↓

TOOL MAP

What PortalMCP exposes to your agents

Read (4) Write / Execute (9) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous PortalMCP tools

Financial · Critical eth_transfer_token This tool transfers ERC-20 tokens on the blockchain, which constitutes direct movement of financial assets/money. Financial · Critical eth_swap_eth_to_usdt This tool performs a live financial transaction on the Ethereum blockchain, exchanging ETH for USDT via Uniswap V3. Financial · Critical eth_stake_tokens Staking tokens moves financial assets into a smart contract, locking them up and committing them to a DeFi financial operation. Financial · Critical eth_swap_tokens This tool performs DeFi token swaps on Uniswap V3, directly committing financial transactions using the user's wallet.

13 of PortalMCP's 17 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control PortalMCP

PolicyLayer is an MCP gateway — it sits between your AI agents and PortalMCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "eth_stake_tokens": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Rate limit write operations

{
  "eth_create_nft_collection": {
    "limits": [
      {
        "counter": "eth_create_nft_collection_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "eth_call_contract": {
    "limits": [
      {
        "counter": "eth_call_contract_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register PortalMCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON PORTALMCP →

Instant setup, no code required.

FULL CATALOGUE

All 17 PortalMCP tools

FINANCIAL 4 tools

Financial eth_stake_tokens Prepare a transaction to stake tokens in a staking contract Financial eth_swap_eth_to_usdt Swap ETH to USDT using Uniswap V3 and execute the transaction Financial eth_swap_tokens Swap any tokens using Uniswap V3. Can handle ETH, WETH, and any ERC-20 tokens. Automatically executes the tran Financial eth_transfer_token Transfer ERC-20 tokens. By default executes the transaction using the configured signer. Set executeTransactio

EXECUTE 5 tools

Execute eth_compile_contract Compile Solidity contract code to bytecode and ABI Execute eth_create_staking_contract Generate and prepare a staking contract for deployment Execute eth_deploy_contract Prepare a transaction to deploy a compiled contract Execute eth_deploy_contract_with_signer Deploy a contract using the configured private key (signer) Execute eth_mint_nft Prepare a transaction to mint an NFT. Picks mint() / safeMint() / mintWithURI() based on provided parameters.

WRITE 4 tools

Write eth_create_nft_collection Generate an ERC-721 NFT collection contract (Solidity). Deploy afterwards with eth_compile_contract + eth_depl Write eth_create_token Generate a new ERC-20 token contract (Solidity). Deploy it afterwards with eth_compile_contract + eth_deploy_c Write eth_generate_contract Generate Solidity contract code using Claude AI Write eth_send_transaction Prepare a generic transaction to be signed by the user\

READ 4 tools

Read eth_call_contract Call a read-only function on an Ethereum smart contract Read eth_get_balance Get ETH balance for an Ethereum address or the default signer wallet Read eth_get_nft_owner Get the current owner of an NFT. Read eth_get_token_balance Get the balance of an ERC-20 token for a specific address, or the default signer wallet if no address is provi

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about PortalMCP

Can an AI agent move money through the Portal MCP server? +

Yes. The PortalMCP server exposes 4 financial tools including eth_stake_tokens, eth_swap_eth_to_usdt, eth_swap_tokens. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

How do I prevent bulk modifications through PortalMCP? +

The PortalMCP server has 4 write tools including eth_create_nft_collection, eth_create_token, eth_generate_contract. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach PortalMCP.

How many tools does the Portal MCP server expose? +

17 tools across 4 categories: Execute, Financial, Read, Write. 4 are read-only. 13 can modify, create, or delete data.

How do I enforce a policy on PortalMCP? +

Register the Portal MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every PortalMCP tool call.

Deterministic rules across all 17 PortalMCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PORTALMCP →

Instant setup, no code required.

17 PortalMCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.