Critical-risk tools in Atv
5 of the 19 tools in Atv are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
build_deposit_txFinancial 5/5Build the transaction steps required to deposit tokens into an ATV vault. Returns an ordered array of transactions (approve then deposit) that must be sent in order.
-
build_queue_withdraw_txFinancial 5/5Build the transaction step to initiate a queued (delayed) withdrawal from an ATV vault. The withdrawal is not instant — it must be redeemed later once processed.
-
build_redeem_withdraw_txFinancial 5/5Build the transaction step to claim (redeem) a completed queued withdrawal from an ATV vault.
-
build_unqueue_withdraw_txFinancial 5/5Build the transaction step to cancel a pending queued withdrawal request from an ATV vault.
-
build_withdraw_txFinancial 5/5Build the transaction steps required to withdraw vault shares from an ATV vault and receive an output token.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.
More on Atv
Enforce policy on Atv
One command generates a policy scaffold for every server in your MCP config.
npx -y @policylayer/intercept init