Critical-risk tools in Justlend

Critical severity Justlend MCP Server 20 of 96 tools

20 of the 96 tools in Justlend are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

return_energy_rental Destructive

Return (cancel) an active energy rental. As a renter, provide the receiver address.
claim_rewards Financial

Claim accrued JustLend mining rewards for the configured wallet.
claim_strx_rewards Financial

Claim all available sTRX staking rewards.
deposit_jst_for_votes Financial

Deposit JST into the WJST contract to get voting power.
moolah_borrow Financial

Flexible Moolah borrow entry point.
moolah_liquidate Financial

Liquidate an undercollateralized Moolah position.
moolah_repay Financial

Repay a Moolah market loan.
moolah_supply_collateral Financial

Supply collateral into a Moolah market to enable borrowing.
moolah_vault_deposit Financial

Deposit assets into a Moolah ERC4626 vault to earn yield.
moolah_vault_withdraw Financial

Withdraw underlying assets from a Moolah vault by specifying the asset amount.
moolah_withdraw_collateral Financial

Withdraw collateral from a Moolah market.
rent_energy Financial

Rent energy from JustLend for a specified receiver address.
repay Financial

Repay borrowed assets to a JustLend market.
supply Financial

Supply (deposit) assets into a JustLend market to earn interest.
transfer_trc20 Financial

Transfer TRC20 tokens to another TRON address.
transfer_trx Financial

Transfer TRX to another TRON address.
withdraw Financial

Withdraw (redeem) supplied assets from a JustLend market.
withdraw_all Financial

Withdraw ALL supplied assets from a JustLend market by redeeming all jTokens.
withdraw_votes_from_proposal Financial

Withdraw (reclaim) votes from a completed or canceled proposal.
withdraw_votes_to_jst Financial

Withdraw WJST back to JST. Can only withdraw votes that are not currently locked in active proposals.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Justlend

Tools at critical risk

Attacks that target this class

More on Justlend

Enforce policy on every Justlend tool call.