Critical-risk tools in Codex CCXT MCP
22 of the 113 tools in Codex CCXT MCP are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
ccxt_cancel_algo_orderDestructiveCall Binance Futures fapiPrivateDeleteAlgoOrder(params) for conditional protection orders.
-
ccxt_cancel_all_algo_ordersDestructiveCall Binance Futures fapiPrivateDeleteAlgoOpenOrders(params) for conditional protection orders.
-
ccxt_cancel_all_ordersDestructiveCall exchange.cancelAllOrders(symbol, params), subject to the trading gate.
-
ccxt_cancel_all_orders_afterDestructiveCall exchange.cancelAllOrdersAfter(timeout, params), subject to the trading gate.
-
ccxt_add_marginFinancialCall exchange.addMargin(symbol, amount, params), subject to the trading gate.
-
ccxt_create_orderFinancialCall exchange.createOrder(symbol, type, side, amount, price, params), subject to the trading gate.
-
ccxt_create_order_with_take_profit_and_stop_lossFinancialCall exchange.createOrderWithTakeProfitAndStopLoss(symbol, type, side, amount, price, takeProfit, stopLoss, params), subject to the trading gate.
-
ccxt_create_ordersFinancialCall exchange.createOrders(orders, params), subject to the trading gate.
-
ccxt_create_post_only_orderFinancialCall exchange.createPostOnlyOrder(symbol, type, side, amount, price, params), subject to the trading gate.
-
ccxt_create_protected_futures_entryFinancialCreate a Binance USDT-M protected entry by submitting close-position stop-loss and take-profit algo orders before the entry order.
-
ccxt_create_reduce_only_orderFinancialCall exchange.createReduceOnlyOrder(symbol, type, side, amount, price, params), subject to the trading gate.
-
ccxt_create_stop_limit_orderFinancialCall exchange.createStopLimitOrder(symbol, side, amount, price, triggerPrice, params), subject to the trading gate.
-
ccxt_create_stop_loss_orderFinancialCall exchange.createStopLossOrder(symbol, type, side, amount, price, stopLossPrice, params), subject to the trading gate.
-
ccxt_create_stop_market_orderFinancialCall exchange.createStopMarketOrder(symbol, side, amount, triggerPrice, params), subject to the trading gate.
-
ccxt_create_stop_orderFinancialCall exchange.createStopOrder(symbol, type, side, amount, price, triggerPrice, params), subject to the trading gate.
-
ccxt_create_take_profit_orderFinancialCall exchange.createTakeProfitOrder(symbol, type, side, amount, price, takeProfitPrice, params), subject to the trading gate.
-
ccxt_create_trailing_amount_orderFinancialCall exchange.createTrailingAmountOrder(symbol, type, side, amount, price, trailingAmount, trailingTriggerPrice, params), subject to the trading gate.
-
ccxt_create_trailing_percent_orderFinancialCall exchange.createTrailingPercentOrder(symbol, type, side, amount, price, trailingPercent, trailingTriggerPrice, params), subject to the trading gate.
-
ccxt_create_trigger_orderFinancialCall exchange.createTriggerOrder(symbol, type, side, amount, price, triggerPrice, params), subject to the trading gate.
-
ccxt_reduce_marginFinancialCall exchange.reduceMargin(symbol, amount, params), subject to the trading gate.
-
ccxt_transferFinancialCall exchange.transfer(code, amount, fromAccount, toAccount, params), subject to the trading gate.
-
ccxt_withdrawFinancialCall exchange.withdraw(code, amount, address, tag, params), subject to the trading gate.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.