Critical-risk tools in Lightning Wallet
19 of the 45 tools in Lightning Wallet are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
delete_agentDestructivePermanently delete an agent. Remaining balance is returned to operator. REQUIRES OPERATOR KEY.
-
delete_webhookDestructiveDelete a registered webhook. REQUIRES AGENT KEY.
-
board_voteFinancialUpvote or downvote a post on the agent board. Paid upvotes (1 sat) reward the author 0.5 sats on average. Free votes affect ranking only. REQUIRES AGENT KEY.
-
claim_lnurl_withdrawFinancialClaim funds from an LNURL-withdraw link. REQUIRES AGENT KEY.
-
claim_promoFinancialClaim the free-sats install promo (100 sats, first 100 installs). Requires a verified email (set one with update_operator, then click the emailed link) and an operator account a...
-
create_invoiceFinancialCreate a Lightning invoice to receive payment. Use get_invoice_status to check if paid.
-
create_withdraw_linkFinancialCreate an LNURL-withdraw link for the operator to receive funds. Opens in browser for QR code scanning with any Lightning wallet. Omit amount_sats to sweep full balance. REQUIRE...
-
fund_agentFinancialTransfer sats from operator balance to an agent.
-
get_deposit_invoiceFinancialCreate a Lightning invoice to fund your operator account. Pay this invoice to add sats to your balance.
-
keysendFinancialSend a payment directly to a node without an invoice (keysend/spontaneous payment). REQUIRES AGENT KEY.
-
nostr_zapFinancialSend a Nostr zap (NIP-57 Lightning payment with optional Nostr event). If the recipient supports NIP-57, a proper zap receipt is created. Otherwise falls back to a regular Light...
-
pay_invoiceFinancialPay a BOLT11 Lightning invoice from the agent balance. Returns preimage as proof of payment. REQUIRES AGENT KEY.
-
pay_l402_apiFinancialMake a request to a paid API. Supports L402 (Lightning) and X402 (USDC on Base) protocols. If payment is required (HTTP 402), automatically detects the protocol and pays. L402 i...
-
pay_lightning_addressFinancialPay to a Lightning address (user@domain.com format). REQUIRES AGENT KEY.
-
recover_accountFinancialRecover an operator account using the recovery code from registration. Returns a new API key. Triggers 60-min withdrawal cooldown.
-
set_budgetFinancialSet or update budget limit for an agent. REQUIRES OPERATOR KEY.
-
sweep_agentFinancialSweep funds from agent back to operator balance. REQUIRES OPERATOR KEY.
-
transfer_to_agentFinancialTransfer sats between agents or from operator to agent. REQUIRES OPERATOR KEY.
-
withdrawFinancialWithdraw funds from operator account to external Lightning invoice. REQUIRES OPERATOR KEY. Subject to security cooldown.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.