Critical-risk tools in Indigo Protocol MCP
16 of the 62 tools in Indigo Protocol MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
annul_sp_requestDestructiveCancel a pending stability pool request. Returns an unsigned transaction (CBOR hex) for client-side signing.
-
adjust_sp_accountFinancialDeposit to or withdraw from an existing stability pool account. Positive amount deposits, negative withdraws. Returns an unsigned transaction (CBOR hex) for client-side signing.
-
adjust_staking_positionFinancialAdjust an existing INDY staking position (add or remove INDY). Returns an unsigned transaction (CBOR hex) for client-side signing.
-
burn_cdpFinancialBurn iAssets to reduce CDP debt — builds an unsigned transaction (CBOR hex) for client-side signing
-
cancel_lrpFinancialCancel an existing LRP position. Returns an unsigned transaction (CBOR hex) for client-side signing.
-
claim_lrpFinancialClaim received iAssets from an LRP position. Returns an unsigned transaction (CBOR hex) for client-side signing.
-
close_cdpFinancialClose a CDP and reclaim collateral — builds an unsigned transaction (CBOR hex) for client-side signing
-
deposit_cdpFinancialDeposit additional collateral into a CDP — builds an unsigned transaction (CBOR hex) for client-side signing
-
distribute_staking_rewardsFinancialDistribute collected ADA rewards from collector UTxOs to staking positions. This is a protocol maintenance operation that anyone can call. Returns an unsigned transaction (CBOR ...
-
leverage_cdpFinancialOpen a leveraged CDP by redeeming against LRP positions — builds an unsigned transaction (CBOR hex) for client-side signing
-
liquidate_cdpFinancialLiquidate an undercollateralized CDP through the stability pool — builds an unsigned transaction (CBOR hex) for client-side signing
-
mint_cdpFinancialMint additional iAssets from an existing CDP (increases debt) — builds an unsigned transaction (CBOR hex) for client-side signing
-
open_cdpFinancialOpen a new CDP position — builds an unsigned transaction (CBOR hex) for client-side signing
-
redeem_cdpFinancialRedeem iAssets from a CDP — builds an unsigned transaction (CBOR hex) for client-side signing. To redeem the maximum possible, pass the total minted amount.
-
redeem_lrpFinancialRedeem iAssets against one or more LRP positions. Returns an unsigned transaction (CBOR hex) for client-side signing.
-
withdraw_cdpFinancialWithdraw collateral from a CDP — builds an unsigned transaction (CBOR hex) for client-side signing
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.