Critical-risk tools in Nostr Bray
13 of the 240 tools in Nostr Bray are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
blossom-deleteDestructiveDelete a blob from a blossom media server by SHA-256 hash.
-
group-remove-userDestructiveRemove a user from a NIP-29 group (kind 9001 admin event).
-
label-removeDestructiveDelete a label event via kind 5 deletion. Only works for labels you authored.
-
marketplace-credentials-clearDestructiveClear all stored L402 credentials from memory. Use when switching identity or cleaning up.
-
marketplace-retireDestructiveRetire (delete) a service announcement by publishing a kind 5 deletion event. The service will no longer appear in discovery results.
-
social-deleteDestructiveRequest deletion of an event you published (kind 5). Relays may or may not honour the request.
-
tombstoneDestructiveOverwrite an addressable event (kind 30000-39999) with empty content, effectively deleting it from relays. Use this to clean up broken or stale replaceable events.
-
trust-revokeDestructiveRevoke a previously issued attestation. Active identity must match the original attestor.
-
vault-revokeDestructiveRevoke a pubkey from the vault config. Fetches the current config, adds the pubkey to the revoked list, signs, and republishes the updated config event. Returns the updated even...
-
zap-wallet-clearDestructiveRemove the NWC wallet for the active identity. Falls back to the global NWC_URI if set.
-
marketplace-payFinancialPay an L402 invoice via NWC and store credentials for authenticated API calls.
-
zap-make-invoiceFinancialGenerate a Lightning invoice via NWC to receive payments.
-
zap-sendFinancialPay a Lightning invoice via Nostr Wallet Connect (NWC). SPENDS REAL SATS. Decodes the invoice and shows amount first — set confirm: true to execute payment.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.