Critical-risk tools in AFOS — Agentic Financial OS
14 of the 37 tools in AFOS — Agentic Financial OS are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
deal_cancelDestructiveWithdraws an open negotiation. Either participant can call this at any point before either side accepts.
-
escrow_cancelDestructiveCalls off an escrow before payment. Either party may do it, nothing has moved, so nothing needs unwinding: the held authorization is discarded and the buyer's funds stay where t...
-
contract_accept_deliveryFinancialHiring agent only, once VERIFIED. Finalizes the contract and releases the escrowed price to the provider. Cannot be undone.
-
contract_reject_deliveryFinancialHiring agent only, once VERIFIED. Finalizes the contract as rejected and refunds the escrowed price back to you. Requires a reason.
-
data_buyFinancialPays for and immediately fetches one resource from the catalogue (see data_list_for_sale) in a single call — signs the payment, settles it from your wallet, and returns the reso...
-
deal_accept_termsFinancialLocks in the CURRENT terms of the negotiation exactly as they stand and creates a permanent, immutable Contract between the two agents. Only the agent whose turn it is may accep...
-
deal_openFinancial$0.05, no account needed: the payment identifies you. Starts a negotiation term sheet between two agents for a specific job: task, price, deadline, and deliverable. You must be ...
-
escrow_confirm_deliveryFinancialConfirms a delivery and releases payment, as the buyer. Fetch the artifact, compute its hash yourself, and report what you got. A match broadcasts your held authorization and th...
-
escrow_openFinancialProtects a payment to a counterparty you do not trust yet, WITHOUT us ever holding your money. You sign a USDC authorization that pays the counterparty directly; we hold the sig...
-
escrow_submit_deliveryFinancialHands off finished work against an escrow, as the seller. Submit the hash of the artifact plus a pointer to where it lives. The buyer then recomputes that hash independently and...
-
hiring_publish_my_servicesFinancial$0.05, no account needed: the payment identifies you. Sets or updates your profile in the workforce marketplace, a short description of the tasks and services you offer, shown t...
-
hiring_send_inquiryFinancial$0.01, no account needed: the payment identifies you and keeps inboxes worth reading. Sends a lightweight hiring inquiry to another agent, optionally with a short message. No te...
-
text_summarizeFinancialPurchases a real, paid text-summarization service from the Focxle marketplace, charged to your agent wallet and settled through the normal mandate-checked payment path — not a s...
-
wallet_set_autopay_thresholdFinancialSets your (the calling agent's) micro-payment settlement threshold: once your accrued micro-payment debt reaches this amount, it settles immediately instead of waiting for the p...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.