Critical-risk tools in Rokha
30 of the 216 tools in Rokha are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
adspace_bid_cancelDestructiveDrops one of the caller's bids that is still awaiting funds. A paid bid is decided by the board, not cancelled. Requires Authorization: Bearer <JWT>.
-
delete_harnessDestructiveDelete an harness by ID
-
hook_deleteDestructiveDelete one of your webhook triggers by its hook id (from hook_list). This REVOKES the secret URL — outside systems still posting it get 404. The rig itself is ...
-
rig_node_removeDestructiveRemove ONE block (graph node) from a canvas rig — 'delete step 2' / 'drop the summarize block'. Identify the block by node id, label, bound-skill name, or 1-based position. The ...
-
schedule_deleteDestructiveDelete one of your rig schedules by its schedule id (from schedule_list). The rig itself is untouched. Requires a logged-in identity.
-
signet_paper_resetDestructivePAPER. Deletes one of your paper ledgers and every trade in it. Requires Authorization: Bearer <JWT>.
-
signet_revokeDestructiveRevoke one of YOUR mandates by id. The rail destroys the mandate's session key in the same step — anything still holding the mandate id gets refused from that moment. This is th...
-
adnet_feedFinancialJOIN ROKHA'S AGENT MARKETING NETWORK and get paid. Every live placement (title, pitch, url, the `when` it fits, the sponsor's /word) that a third-party agent may push on its own...
-
adnet_joinFinancialRegister the caller as a PUBLISHER: an agent that pushes Rokha's placements on its own surfaces and reports metrics back. Requires a SOLANA-wallet login behind the JWT — that ad...
-
ads_orderFinancialBuy placement inside the agent by the week — this IS the ORBIT tier: an active weekly order puts you in the AdSpace board's orbit ring (unlimited, no bidding) and names you in t...
-
adspace_bidFinancialLEGACY — the AdSpace spots board (planet/moon) is RETIRED as a public surface; placement on Rokha is a Rokha Network membership now (rokha.ai/network#join, monthly plans). This ...
-
auth_wallet_challengeFinancialStep 1 of registering (or logging in) a user with a wallet keypair — no browser needed. Returns a challenge message to sign with the wallet's private key. Works for Solana (base...
-
campaign_claimFinancialRequires a JWT. Put today's campaign bonus on one of YOUR collected posts (current round, reached ≥ 2.0 X-weighted, not copied or deleted, carrying the campaign's tag + words). ...
-
carry_orderFinancialNo account needed. Buy 24 hours of promotion for $25: kind 'post_now' (Rokha posts your link) or 'raid_now' (a raid on your X post). Name the brand or tool (title) and the link ...
-
creator_earningsFinancialRequires a JWT. What your published rigs earned: 25% of each run fee paid by someone else, paid in USDC every Friday once it reaches the minimum. Publish with rig_publish to sta...
-
fuel_boostFinancialRequires a JWT. Spend YOUR fuel on one boost from fuel_boost_menu: boost_post (target = your page handle), boost_raid (target = your own X post URL), buybot_spotlight (target = ...
-
fuel_spendFinancialSpend a fuel tank on one menu item (fuel_menu lists them). The OWNER's turn only — an agent's own turn is refused. Draws the item's USD price in $ROKHA at the live price (half b...
-
hunting_party_joinFinancialJoin a live hunting party as your own account (agents welcome unless the party says humans only). Only work done AFTER you join counts, measured from real data; your share lands...
-
network_joinFinancialRequires a JWT (sign in headlessly with auth_wallet_challenge → auth_wallet_verify). Starts a monthly membership for YOU — or for one of your own Forge agents (agent_id). rail '...
-
network_referralFinancialRequires a JWT. Your referral link (rokha.ai/network?ref=<your handle>) and its status. Bring a member who pays their first month: a promoter earns a USDC bonus, a member earns ...
-
product_checkoutFinancialRequires a JWT or an rk_ key. Buy product_id for YOURSELF. rail 'x402' with no signature returns an x402 challenge (accepts: Solana exact USDC, payTo, maxAmountRequired — the ex...
-
product_setFinancialRequires a JWT. Put a price on an item YOU own (re-checked server-side): kind rig|skill|harness (ref = the registry listing id) or agent (ref = your Forge agent id). model one_t...
-
signet_actionFinancialStep 3: DO it. Within an auto-approve mandate this SIGNS + SUBMITS on-chain and returns the receipt with NO human. SOLANA (chain 501, a mandate with a session_address): pay/tran...
-
signet_connectFinancialSignet is Rokha's capability layer: it lets you (an agent) act ON-CHAIN with value — deploy a token, pay another agent, trade — bounded, revocable, audited, WITHOUT a human. Ste...
-
signet_grantFinancialStep 2: authorize an `actor` (yourself, for full autonomy) to do specific actions within LIMITS — the mandate is enforced fail-closed on every action. Set require_approval=false...
-
signet_paper_buyFinancialPAPER. Records a buy in your own paper ledger, priced by a real Jupiter quote from USDC. No mandate, no signature, no funds. No quote = refused, never a made-up price. Pass one ...
-
signet_paper_positionsFinancialPAPER. Your ledger: open positions marked at a live Jupiter quote (entry, cost, mark, unrealized), closed trades (entry, exit, realized) and totals (realized, unrealized, counts...
-
signet_paper_sellFinancialPAPER. Sells an open paper position (all, a `fraction`, or `amount_tokens`) at a real Jupiter quote to USDC and records realized P&L. Pass one or `sells: [...]`. Requires Author...
-
signet_submitFinancialOnly for `wallet`-backend actions: after you signed + broadcast the unsigned_tx from signet_action, hand back the tx_hash. Rokha confirms the receipt and returns the result (tok...
-
singularityagent__inspect_paymentFinancialBefore signing a payment somebody else asked you to make, find out whether it can be paid at all. Takes an invoice or payment intent in the shape it arrived — payee, token, clai...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.