Critical-risk tools in Aibtc
27 of the 288 tools in Aibtc are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
credentials_deleteDestructive 4/5Remove a stored credential by service and key. The encrypted store file is rewritten without the deleted entry.
-
identity_unset_walletDestructive 4/5Remove the agent wallet association from an agent identity in the ERC-8004 identity registry. Requires an unlocked wallet.
-
jingswap_cancel_cycleDestructive 4/5Cancel the current auction cycle if settlement has failed for too long. Can only be called 530 blocks (~17.5 min) after deposits were closed (BUFFER_BLOCKS 30 + CANCEL_THRESHOLD...
-
jingswap_cancel_sbtcDestructive 4/5Cancel your sBTC deposit from the current Jingswap auction cycle and get a full refund. Only works during the deposit phase. Works the same for both markets.
-
jingswap_cancel_stxDestructive 4/5Cancel your token-B deposit (STX or USDCx depending on market) from the current Jingswap auction cycle and get a full refund. Only works during the deposit phase.
-
ordinals_cancel_listingDestructive 4/5Cancel an active Magic Eden listing for an inscription. Requests a cancellation PSBT from Magic Eden. The seller signs the PSBT to invalidate the active listing and reclaim the...
-
ordinals_p2p_cancelDestructive 4/5Cancel an open offer or counter on the trade ledger. Only the parties involved in a trade may cancel it. The active wallet signs the cancellation with BIP-137 to prove authoriz...
-
pillar_direct_revoke_fast_poolDestructive 4/5Revoke Fast Pool STX delegation from your Pillar smart wallet. Agent-signed, no browser needed. Backend sponsors gas. After revoking, STX stays locked until the current PoX cycl...
-
recover_sponsor_nonceDestructive 4/5Attempt automated recovery of stuck sponsor transactions via the relay API, or resync the local nonce counter. Run check_relay_health first to identify stuck txids and missing ...
-
reputation_revoke_feedbackDestructive 4/5Revoke a previously submitted feedback entry by index. Only the original submitter can revoke their feedback. Requires an unlocked wallet.
-
stackspot_cancel_potDestructive 4/5Cancel a Stackspot stacking lottery pot before stacking begins. Cancels an unlocked pot to recover contributed STX. The pot must not yet be locked (i.e., stacking has not start...
-
wallet_deleteDestructive 5/5Permanently delete a wallet. WARNING: This cannot be undone! Make sure you have backed up your mnemonic.
-
identity_transferFinancial 5/5Transfer an agent identity NFT to a new owner in the ERC-8004 identity registry. This clears the agent wallet association — run identity_set_wallet after if needed. Requires an ...
-
jingswap_deposit_sbtcFinancial 5/5Deposit sBTC into the current Jingswap auction cycle. Only works during the deposit phase. Amount is in satoshis (e.g. 1000 for 1000 sats). Works the same for both sbtc-stx and ...
-
jingswap_deposit_stxFinancial 5/5Deposit the token-B side (STX or USDCx depending on market) into the current Jingswap auction cycle. Only works during the deposit phase. Amount is in human units (e.g. 10 for 1...
-
ordinals_p2p_transferFinancial 5/5Record a completed inscription transfer on the trade ledger. Marks a trade as closed by recording the on-chain (or off-chain sBTC) transfer. The active wallet signs the record ...
-
pillar_direct_withdraw_collateralFinancial 5/5Withdraw sBTC collateral from Zest on the Pillar smart wallet. Agent-signed, no browser needed. Backend sponsors gas.
-
sbtc_depositFinancial 5/5Deposit BTC to receive sBTC on Stacks L2. This builds, signs, and broadcasts a Bitcoin transaction to the sBTC deposit address. After confirmation, sBTC tokens are minted to yo...
-
sbtc_transferFinancial 5/5Transfer sBTC tokens to a recipient address. sBTC uses 8 decimals (same as Bitcoin). Example: To send 0.001 sBTC, use amount "100000" (satoshis).
-
sbtc_withdrawFinancial 5/5Alias for sbtc_initiate_withdrawal. Initiates an sBTC peg-out request to BTC L1.
-
styx_depositFinancial 5/5Full headless BTC→sBTC deposit via the Styx protocol. Flow: reserve pool liquidity → build PSBT locally → sign with wallet keys → broadcast to mempool.space → update deposit sta...
-
transfer_btcFinancial 5/5Transfer BTC to a recipient address. Builds, signs, and broadcasts a Bitcoin transaction. Requires an unlocked wallet with BTC balance. By default, only uses cardinal UTXOs (saf...
-
transfer_nftFinancial 5/5Transfer an NFT (SIP-009) to a recipient address.
-
transfer_runeFinancial 5/5Transfer runes to a recipient address using Runestone OP_RETURN encoding. Builds a Bitcoin transaction with a Runestone, sends runes to the recipient, and returns remaining run...
-
transfer_stxFinancial 5/5Transfer STX tokens to a recipient address. Signs and broadcasts the transaction. Example: To send 2 STX, use amount "2000000" (micro-STX). 1 STX = 1,000,000 micro-STX
-
transfer_tokenFinancial 5/5Transfer any SIP-010 token to a recipient address. Supports well-known tokens by symbol: sBTC, USDCx, ALEX, DIKO Or use the full contract ID.
-
zest_withdrawFinancial 5/5Withdraw assets from Zest Protocol v2. Removes collateral and redeems for underlying assets in one atomic operation. You can use the asset symbol (e.g., 'sBTC', 'USDC') or full...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.
More on Aibtc
Enforce policy on Aibtc
One command generates a policy scaffold for every server in your MCP config.
npx -y @policylayer/intercept init