// SCAN REPORT

RSK MCP Server - Rootstock Blockchain Tools

22 tools. 14 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 29 Jun 2026

14 can modify or destroy data

8 read-only

22 tools total

Community server · catalogue entry verified 29/06/2026

How to control RSK MCP Server - Rootstock Blockchain Tools ↓

TOOL MAP

What RSK MCP Server - Rootstock Blockchain Tools exposes to your agents

Read (8) Write / Execute (10) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous RSK MCP Server - Rootstock Blockchain Tools tools

Financial · High attest-transfer Attesting a transfer on a blockchain is a financial operation as it records or authorizes movement of assets (tokens/crypto) on the Rootstock network. Financial · Critical transfer-tokens This tool directly transfers cryptocurrency (RBTC) or blockchain tokens (ERC20) between wallets. Destructive · Medium cancel-operation Cancelling a pending blockchain operation is irreversible — once a cancel transaction is submitted on-chain, the original operation cannot be reinstated. Destructive · High revoke-attestation Revocation of an attestation cannot be undone; once revoked, the attestation ceases to be valid and typically cannot be restored without re-issuance through separate processes.

14 of RSK MCP Server - Rootstock Blockchain Tools's 22 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control RSK MCP Server - Rootstock Blockchain Tools

PolicyLayer is an MCP gateway — it sits between your AI agents and RSK MCP Server - Rootstock Blockchain Tools, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "attest-transfer": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "cancel-operation": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "attest-deployment": {
    "limits": [
      {
        "counter": "attest-deployment_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "check-balance": {
    "limits": [
      {
        "counter": "check-balance_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register RSK MCP Server - Rootstock Blockchain Tools — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON RSK MCP SERVER - ROOTSTOCK BLOCKCHAIN TOOLS →

Instant setup, no code required.

FULL CATALOGUE

All 22 RSK MCP Server - Rootstock Blockchain Tools tools

FINANCIAL 2 tools

Financial attest-transfer Create a transfer attestation on Rootstock using RAS. Uses default testnet schema UIDs when none is provided. Financial transfer-tokens Transfer RBTC or ERC20 tokens on Rootstock blockchain between wallets

DESTRUCTIVE 2 tools

Destructive cancel-operation Cancel a pending operation Destructive revoke-attestation Revoke an existing attestation by UID on Rootstock network

EXECUTE 4 tools

Execute confirm-operation Confirm and execute a pending operation Execute deploy-contract Deploy a smart contract to the Rootstock blockchain using ABI and bytecode Execute start-interaction Start interaction with the Rootstock CLI functions, start this once someone ask something related to the roots Execute verify-contract Verify a smart contract on the Rootstock blockchain using source code and compilation metadata

WRITE 6 tools

Write attest-deployment Create a deployment attestation on Rootstock using RAS. Uses default testnet schema UIDs when none is provided Write attest-verification Create a contract verification attestation on Rootstock using RAS. Uses default testnet schema UIDs when none Write create-schema Create a new attestation schema on Rootstock network Write create-wallet Create a new wallet based on the selected option. This function will ask for required information step by step Write issue-attestation Issue a new attestation on Rootstock network using RAS (Rootstock Attestation Service) Write use-wallet-from-creation Use wallet data directly from a previous wallet creation result. This helps avoid re-uploading files.

READ 8 tools

Read check-balance Check the balance of a wallet for RBTC or ERC20 tokens on Rootstock blockchain. You can either use an existing Read check-transaction Check the status and details of a transaction on Rootstock blockchain using the transaction hash Read check-transaction-history Check the transaction history of a wallet on Rootstock blockchain using Alchemy API Read list-attestations List attestations on Rootstock network by querying EAS contract event logs. Requires a custom rpcUrl — RSK pub Read list-pending-operations List all pending operations that require user confirmation Read read-contract Read data from a verified smart contract on the Rootstock blockchain by calling view/pure functions Read start-wallet-interaction Start wallet management interaction. This shows all available wallet operations and management options. Read verify-attestation Verify an existing attestation by UID on Rootstock network

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about RSK MCP Server - Rootstock Blockchain Tools

Can an AI agent move money through the RSK MCP Server - Rootstock Blockchain Tools MCP server? +

Yes. The RSK MCP Server - Rootstock Blockchain Tools server exposes 2 financial tools including attest-transfer, transfer-tokens. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the RSK MCP Server - Rootstock Blockchain Tools MCP server? +

Yes. The RSK MCP Server - Rootstock Blockchain Tools server exposes 2 destructive tools including cancel-operation, revoke-attestation. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through RSK MCP Server - Rootstock Blockchain Tools? +

The RSK MCP Server - Rootstock Blockchain Tools server has 6 write tools including attest-deployment, attest-verification, create-schema. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach RSK MCP Server - Rootstock Blockchain Tools.

How many tools does the RSK MCP Server - Rootstock Blockchain Tools MCP server expose? +

22 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 8 are read-only. 14 can modify, create, or delete data.

How do I enforce a policy on RSK MCP Server - Rootstock Blockchain Tools? +

Register the RSK MCP Server - Rootstock Blockchain Tools MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every RSK MCP Server - Rootstock Blockchain Tools tool call.

Deterministic rules across all 22 RSK MCP Server - Rootstock Blockchain Tools tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON RSK MCP SERVER - ROOTSTOCK BLOCKCHAIN TOOLS →

Instant setup, no code required.

22 RSK MCP Server - Rootstock Blockchain Tools tools catalogued and risk-classified — across an index of 43,000+ MCP servers.