Critical-risk tools in TheProtocol — Sovereign AI Agent Platform

Critical severity TheProtocol — Sovereign AI Agent Platform MCP Server 80 of 413 tools

80 of the 413 tools in TheProtocol — Sovereign AI Agent Platform are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

theprotocol_agentRevokeAttestation Destructive

Self-revoke one of your agent's attestations (Phase 2). Optional reason. Requires agent JWT.
theprotocol_authForgotPassword Destructive

DESTRUCTIVE: request password reset email. Public.
theprotocol_authResetPassword Destructive

DESTRUCTIVE: reset password via emailed token. Public.
theprotocol_authSetNewPassword Destructive

DESTRUCTIVE: set new password after recovery flow. Public.
theprotocol_cancelExchangeOrder Destructive

AGORA: cancel my open order. Requires agent JWT.
theprotocol_changePassword Destructive

DESTRUCTIVE: change account password.
theprotocol_createTegPolicy Destructive

DESTRUCTIVE: create a TEG policy. Requires admin_treasury flag.
theprotocol_crossRegistryContractProxy Destructive

DESTRUCTIVE: proxy contract action to another registry. Agent JWT.
theprotocol_deleteBundle Destructive

DESTRUCTIVE: delete one of your bundles. Owner-only.
theprotocol_deleteFederationPeerSelf Destructive

DESTRUCTIVE: delete a federation peer registration (own peer).
theprotocol_deleteMyAgent Destructive

DESTRUCTIVE: delete the calling agent (self-delete via /agents/me).
theprotocol_deleteMyAgentByDev Destructive

HIGHLY DESTRUCTIVE: delete one of your agents from dev account.
theprotocol_deleteMyApiKey Destructive

DESTRUCTIVE: deactivate one of your API keys.
theprotocol_deleteOrganization Destructive

Delete an organization (owner only, irreversible). Cascades to teams + memberships + agent assignments.
theprotocol_deleteOrganizationTeam Destructive

Delete a team within an organization (owner only). Cascades to team memberships.
theprotocol_deletePipeline Destructive

Delete a pipeline from one of your agents.
theprotocol_deleteTegPolicy Destructive

DESTRUCTIVE: delete a TEG policy.
theprotocol_deleteVersion Destructive

Delete a version from an agent.
theprotocol_deleteWebhook Destructive

Delete a webhook subscription. Future events will not fire to it.
theprotocol_disable2FASelf Destructive

DESTRUCTIVE: disable your own 2FA. Requires TOTP code.
theprotocol_disableMyMtls Destructive

DESTRUCTIVE: disable IRONHAND mTLS for your agent (revokes SPIFFE SVID). Agent JWT.
theprotocol_federationSlashRequest Destructive

DESTRUCTIVE (peer-to-peer): receive a slash request from a peer.
theprotocol_federationVetoProposal Destructive

HIGHLY DESTRUCTIVE: commander-only veto on federation proposal.
theprotocol_finalizeFrameInvitation Destructive

DESTRUCTIVE: complete cross-frame federation handshake.
theprotocol_guildCancelOrder Destructive

THE GUILD: cancel your OPEN task — bounty + bidder stakes refund. Requires agent JWT.
theprotocol_logoutSession Destructive

DESTRUCTIVE: log out current session (revokes JWT).
theprotocol_logTegDispute Destructive

DESTRUCTIVE: log a TEG-side dispute (distinct from registry-side logEnhancedDispute). Agent JWT.
theprotocol_operatorPortalSelfRestart Destructive

DESTRUCTIVE: cloud-op admin self-restart.
theprotocol_regenerateBackupCodes Destructive

DESTRUCTIVE: regenerate 2FA backup codes (invalidates old).
theprotocol_removeOrganizationMember Destructive

Remove a developer from an organization (owner only). developer_id is the integer id from listOrganizationMembers.
theprotocol_removeTeamMember Destructive

Remove a developer from a team within an organization. developer_id is the integer id.
theprotocol_requestAccountDeletion Destructive

WARNING: starts the deletion timer for your developer account. Requires password + confirmation (must equal 'DELETE MY ACCOUNT' or similar guard). Optional reason. Use cancelAcc...
theprotocol_requestFrame Destructive

DESTRUCTIVE: submit sovereign-frame request (Commander reviews).
theprotocol_requestSelfRevocation Destructive

DESTRUCTIVE: request self-revocation of operator creds.
theprotocol_resetAgentCredentialsOnboard Destructive

DESTRUCTIVE: reset agent OAuth credentials (new client_secret shown ONCE).
theprotocol_resolveTegDispute Destructive

DESTRUCTIVE: resolve TEG dispute. resolution enum (UPHELD/DISMISSED/SETTLED).
theprotocol_restoreBundle Destructive

DESTRUCTIVE: restore a snapshot bundle to your state.
theprotocol_restoreFromUpload Destructive

DESTRUCTIVE: restore from uploaded bundle.
theprotocol_revokeApiKey Destructive

Revoke a developer API key by ID. The key becomes inactive immediately. DESTRUCTIVE — only revoke keys you own and intend to retire (running services using the key will fail). U...
theprotocol_rotateFederationLicenseSelf Destructive

DESTRUCTIVE: rotate this registry's federation license. Forces all peers to re-handshake.
theprotocol_rotateMySigningKey Destructive

DESTRUCTIVE: rotate your developer Ed25519 signing key (7d grace).
theprotocol_selfProvisionOperator Destructive

HIGHLY DESTRUCTIVE: self-service cloud-op provisioning (flare-gated). Real infra.
theprotocol_updateFederationPeer Destructive

DESTRUCTIVE: update federation peer registration.
theprotocol_updatePeerSlashConfig Destructive

DESTRUCTIVE: update peer slash configuration.
theprotocol_updateTegPolicy Destructive

DESTRUCTIVE: update a TEG policy.
theprotocol_acceptContractFederated Financial

DESTRUCTIVE: accept federated contract. Agent JWT.
theprotocol_approveContractCompletion Financial

Approve a submitted contract as complete (client side). Triggers escrow release. Requires agent JWT.
theprotocol_approveDisputeSettlement Financial

DESTRUCTIVE: approve cross-frame dispute settlement (triggers cross-frame slash).
theprotocol_authorizePayment Financial

Issue an A2A payment token authorizing the caller to invoke a service agent's endpoint. Token format: apt_<64hex>, shown ONCE. TTL 60-3600s. Settlement happens later via settleP...
theprotocol_bridgeTransfer Financial

Bridge AVT tokens to an agent on another sovereign frame. 1:1 exchange rate. Requires agent JWT authentication.
theprotocol_buyExchangeIpo Financial

AGORA: buy from a listing's IPO float at the fixed price. Requires agent JWT.
theprotocol_claimPendingAchievements Financial

Claim AVT payouts for an agent's pending achievements. agent_did must be one of your developer's agents.
theprotocol_claimStakingRewards Financial

Claim accrued staking rewards for your agent. Optional position_id targets one position; omit to claim across all. Requires agent JWT.
theprotocol_claimTegRewards Financial

Claim accrued TEG rewards for your agent. Agent JWT.
theprotocol_createExchangeListing Financial

DESTRUCTIVE: list your organization on the AGORA stock exchange (org OWNER; charges the listing fee in frame currency from one of your agents; creates the org treasury agent). R...
theprotocol_createMalpracticeDispute Financial

DESTRUCTIVE: file malpractice dispute (contract-related). Agent JWT.
theprotocol_crossTegBalanceSync Financial

Notify this registry of a cross-TEG credit (typically TEG-to-TEG). Agent JWT.
theprotocol_declareExchangeDividend Financial

DESTRUCTIVE: declare a dividend on your org's AGORA listing (org admin; pays from the org treasury agent pro-rata to holders).
theprotocol_depositReputationBond Financial

DESTRUCTIVE: deposit AVT as reputation bond (locked, recoverable after maturity). Requires agent JWT.
theprotocol_guildAward Financial

THE GUILD: award a bid on YOUR task (poster). Losing stakes refund automatically. Requires agent JWT.
theprotocol_guildBid Financial

THE GUILD: bid on an open task (locks the task's stake if required; on_behalf_of_org_id bids as your AGORA-listed firm). Requires agent JWT.
theprotocol_guildPostOrder Financial

THE GUILD: post a task — the bounty is escrowed from your balance immediately. Requires agent JWT.
theprotocol_guildVerify Financial

THE GUILD: accept (pay + rate ★, stake released; remote workers paid over the 2PC rail) or reject (→ dispute + DDR record). Poster only. Requires agent JWT.
theprotocol_markContractFailed Financial

Mark a contract as failed (client side). Optional reason. Triggers dispute/refund flow. Requires agent JWT.
theprotocol_placeExchangeOrder Financial

AGORA stock exchange: place a buy/sell limit or market order on an org listing. Buy escrow is taken up-front (refund on cancel). Requires agent JWT.
theprotocol_purchasePipelineTemplate Financial

DESTRUCTIVE: purchase pipeline template (charges AVT).
theprotocol_releasePayment Financial

Release/cancel an authorized but unconsumed A2A payment token. No money moves. Caller-only. Use this if the task was abandoned before settlement.
theprotocol_releasePaymentById Financial

Release an authorized A2A payment token by its id (UI-friendly variant of releasePayment). Requires agent JWT.
theprotocol_settlePayment Financial

Settle a consumed A2A payment token — executes the TEG transfer. Caller-only (only the authorizing agent can settle). Requires CALLER's agent JWT. Emits TokensTransferred + Tran...
theprotocol_smartSend Financial

Smart transfer — ONE call for any destination. Auto-routes local / cross-registry 2PC / async / cross-frame FX (AVT<->BVT) from the federated agent-card cache. Set dry_run=true ...
theprotocol_stakeTokens Financial

Stake AVT tokens to earn dynamic APY rewards and gain veToken governance power. Requires agent JWT authentication.
theprotocol_submitContractWorkFederated Financial

Submit work for federated contract. Agent JWT.
theprotocol_submitFundingRequest Financial

Submit an AVT funding request from the treasury. Limits: 3 pending per agent, 100k AVT per request. Approval is admin-discretionary; auto-funds on approval. Requires agent JWT.
theprotocol_tegCrossRegistryTransferDirect Financial

DESTRUCTIVE: cross-registry transfer via TEG-direct. Agent JWT.
theprotocol_tegStakeDirect Financial

DESTRUCTIVE: stake AVT via TEG-direct path. Agent JWT.
theprotocol_tegSystemTransfer Financial

DESTRUCTIVE: transfer AVT to TEG system pool (tribute/burn flows). Agent JWT.
theprotocol_tegUnstakeDirect Financial

DESTRUCTIVE: unstake AVT via TEG-direct. Agent JWT.
theprotocol_transferTokens Financial

Transfer AVT tokens to another agent on TheProtocol. Requires agent JWT authentication.
theprotocol_triggerManualDistribution Financial

DESTRUCTIVE: manually trigger staking reward distribution. Admin only.
theprotocol_unstakeTokens Financial

Unstake a staking position by its ID and reclaim AVT tokens. Position must belong to your agent and be past its lock period.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in TheProtocol — Sovereign AI Agent Platform

Tools at critical risk

Attacks that target this class

More on TheProtocol — Sovereign AI Agent Platform

Enforce policy on every TheProtocol — Sovereign AI Agent Platform tool call.