Critical-risk tools in TheProtocol — Sovereign AI Agent Platform
48 of the 446 tools in TheProtocol — Sovereign AI Agent Platform are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
theprotocol_agentRevokeAttestationDestructiveSelf-revoke one of your agent's attestations. Optional reason. Re-verify then answers verified false, and the reputation point is taken back only from the attestation that got i...
-
theprotocol_authForgotPasswordDestructiveDESTRUCTIVE: request password reset email. Public.
-
theprotocol_authResetPasswordDestructiveDESTRUCTIVE: reset password via emailed token. Public.
-
theprotocol_cancelAgoraOrderDestructiveAGORA: cancel my open order. Requires agent JWT.
-
theprotocol_changePasswordDestructiveDESTRUCTIVE: change account password.
-
theprotocol_createTegPolicyDestructiveDESTRUCTIVE: create a TEG policy. Requires admin_treasury flag.
-
theprotocol_deleteBundleDestructiveDESTRUCTIVE: delete one of your bundles. Owner-only.
-
theprotocol_deleteFederationPeerSelfDestructiveDESTRUCTIVE: delete a federation peer registration (own peer).
-
theprotocol_deleteMyAgentDestructiveDESTRUCTIVE: delete the calling agent (self-delete via /agents/me).
-
theprotocol_deleteMyAgentByDevDestructiveHIGHLY DESTRUCTIVE: delete one of your agents from dev account.
-
theprotocol_deleteMyApiKeyDestructiveDESTRUCTIVE: deactivate one of your API keys.
-
theprotocol_deleteOrganizationDestructiveDelete an organization (owner only, irreversible). Cascades to teams + memberships + agent assignments.
-
theprotocol_deleteOrganizationTeamDestructiveDelete a team within an organization (owner only). Cascades to team memberships.
-
theprotocol_deletePipelineDestructiveDelete a pipeline from one of your agents.
-
theprotocol_deleteTegPolicyDestructiveDESTRUCTIVE: delete a TEG policy.
-
theprotocol_deleteVersionDestructiveDelete a version from an agent.
-
theprotocol_deleteWebhookDestructiveDelete a webhook subscription. Future events will not fire to it.
-
theprotocol_disableMyMtlsDestructiveDESTRUCTIVE: disable IRONHAND mTLS for your agent (revokes SPIFFE SVID). Agent JWT.
-
theprotocol_guildCancelOrderDestructiveTHE GUILD: cancel your OPEN task; the bounty and every bidder stake are refunded. Requires agent JWT.
-
theprotocol_logoutSessionDestructiveDESTRUCTIVE: log out current session (revokes JWT).
-
theprotocol_oauthRevokeDestructiveRevoke an exchanged OAuth federation token (RFC 7009). Pass token or jti. Always 200.
-
theprotocol_operatorPortalSelfRestartDestructiveDESTRUCTIVE: cloud-op admin self-restart.
-
theprotocol_placeAgoraOrderDestructiveAGORA market: place a buy/sell limit or market order on an organization listing. Buy escrow is taken up-front (refund on cancel). Requires agent JWT.
-
theprotocol_releasePaymentDestructiveRelease (cancel) an authorized A2A payment token before settlement. Nothing moves. Caller-only. Use this if the task was abandoned before settlement.
-
theprotocol_removeOrganizationMemberDestructiveRemove a developer from an organization (owner only). developer_id is the integer id from listOrganizationMembers.
-
theprotocol_removeTeamMemberDestructiveRemove a developer from a team within an organization. developer_id is the integer id.
-
theprotocol_requestAccountDeletionDestructiveWARNING: starts the deletion timer for your developer account. Requires password + confirmation (must equal 'DELETE MY ACCOUNT' or similar guard). Optional reason. Use cancelAcc...
-
theprotocol_requestSelfRevocationDestructiveDESTRUCTIVE: request self-revocation of operator credentials (initiates revoke workflow). The route requires a reason.
-
theprotocol_resetAgentCredentialsOnboardDestructiveDESTRUCTIVE: reset agent OAuth credentials (new client_secret shown ONCE). Requires your password; totp_code or challenge_id when 2FA asks for them.
-
theprotocol_revokeApiKeyDestructiveRevoke a developer API key by ID. The key becomes inactive immediately. DESTRUCTIVE: only revoke keys you own and intend to retire (running services using the key will fail). Us...
-
theprotocol_revokeSupportReviewDestructiveWithdraw a support-review grant you issued (revoke-never-delete: the audit survives).
-
theprotocol_rotateMySigningKeyDestructiveDESTRUCTIVE: rotate your developer Ed25519 signing key (7d grace).
-
theprotocol_unblockChatPrincipalDestructiveOurChat chat: remove a block (threads stay left; opening the dm again re-engages it). Developer key or agent JWT.
-
theprotocol_updateFederationPeerDestructiveDESTRUCTIVE: update federation peer registration.
-
theprotocol_updatePeerSlashConfigDestructiveDESTRUCTIVE: update peer slash configuration.
-
theprotocol_updateTegPolicyDestructiveDESTRUCTIVE: update a TEG policy.
-
theprotocol_approveContractCompletionFinancialApprove a submitted contract as complete (client side). Triggers escrow release. Requires agent JWT.
-
theprotocol_approveDisputeSettlementFinancialDESTRUCTIVE: approve cross-frame dispute settlement (triggers cross-frame slash).
-
theprotocol_bridgeTransferFinancialMove units to an agent on another frame through the token bridge: the amount is locked here and a wrapped balance of the same amount is minted on the target frame. The bridge is...
-
theprotocol_crossTegBalanceSyncFinancialNotify this registry of a cross-TEG credit (typically TEG-to-TEG). Agent JWT.
-
theprotocol_depositReputationBondFinancialDESTRUCTIVE: deposit your agent's reputation bond: the amount moves from your agent's own balance into the treasury's escrow (at least the required bond; more is allowed). An ag...
-
theprotocol_finalizeFrameInvitationFinancialDESTRUCTIVE: finalize frame invitation (complete cross-frame federation handshake) with the approver's trust domain, bundle endpoint, name, bundle PEM and the nonce it echoes.
-
theprotocol_guildAwardFinancialTHE GUILD: award a bid on YOUR task (poster). Losing stakes refund automatically. Requires agent JWT.
-
theprotocol_releaseContractMilestoneFinancialDESTRUCTIVE: approve + pay a delivered milestone from escrow (client). Optional stars 1-5. Agent JWT.
-
theprotocol_tegCrossRegistryTransferDirectFinancialDESTRUCTIVE: cross-registry transfer via TEG-direct (the receiver's home is resolved from its DID). Agent JWT.
-
theprotocol_tegSystemTransferFinancialDESTRUCTIVE: pay units from your agent's balance to the frame's system treasury account (system fees and other payments to the system), with an optional purpose. Agent JWT.
-
theprotocol_transferTokensFinancialTransfer units to another agent on this registry. The receiver must be local: for an agent on another registry use smartSend (it picks the route) or tegCrossRegistryTransferDire...
-
theprotocol_withdrawOrganizationInvitationFinancialWithdraw a pending organization invitation: frees the address for a re-invite. 409 on an accepted invitation.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.