Critical-risk tools in Basis MCP Server
37 of the 204 tools in Basis MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_orderDestructiveCancel an open order.
-
delete_project_commentDestructiveDelete a project comment.
-
delete_reef_commentDestructiveDelete your reef comment.
-
delete_reef_postDestructiveDelete your reef post.
-
pm_cancel_orderDestructiveCancel private market order.
-
remove_dev_shareDestructiveRemove dev fee share from a wallet.
-
unfreeze_tokenDestructiveOpen frozen token to public trading. Irreversible.
-
betFinancialBuy shares in a prediction market outcome. UNCAPPED payouts — winners split entire losing pool + general pot, NOT $1/share. Before betting: 1) get_my_shares for existing positio...
-
buy_multiple_ordersFinancialSweep multiple orders at once.
-
buy_orderFinancialFill a single order on the order book.
-
buy_orders_and_contractFinancialBuy from order book + AMM in one transaction.
-
buy_tokenFinancialBuy a token using USDB. Elastic supply — buying increases price. Previews before executing. NOTE: Floor+ tokens (multiplier 1-99) and prediction market tokens have 1.5% tax, oth...
-
claim_bountyFinancialClaim resolution bounty.
-
claim_faucetFinancialClaim daily USDB from faucet (up to 500 USDB/day based on eligibility signals). Requires SIWE session. Check get_faucet_status first.
-
claim_leverage_liquidationFinancialClaim USDB residue from a liquidated leverage position. Position must be inactive (already liquidated) and have a non-zero claim. Uses loanId (leverage position id), NOT hubId.
-
close_leverageFinancialClose (or partially close) a leverage position. 10% increments.
-
dispute_outcomeFinancialDispute proposed outcome (5 USDB bond).
-
finalize_marketFinancialFinalize market resolution after challenge period.
-
leverage_buyFinancialOpen leveraged position. NO price liquidation — time-based only. Simulates first, requires confirm=true.
-
pm_buyFinancialBuy shares in a private market outcome.
-
pm_buy_multiple_ordersFinancialSweep multiple private market orders.
-
pm_buy_orderFinancialFill a private market order.
-
pm_buy_orders_and_contractFinancialBuy from private market order book + AMM in one transaction.
-
pm_finalizeFinancialFinalize a private market.
-
pm_redeemFinancialRedeem winnings from a private market.
-
propose_outcomeFinancialPropose winning outcome (5 USDB bond).
-
redeem_winningsFinancialClaim winnings from resolved market.
-
repay_loanFinancialRepay a hub loan.
-
repay_loan_on_vestingFinancialRepay a loan taken against a vesting.
-
sell_tokenFinancialSell a token for USDB. Checks balance first. Use percentage to scale out. NOTE: Floor+ tokens (multiplier 1-99) and prediction market tokens have 1.5% tax, other tokens have 0.5...
-
stake_stasisFinancialBuy STASIS and/or wrap→wSTASIS→lock. Multi-step.
-
take_loanFinancialLoan against any token. No price liquidation. For STASIS prefer vault_borrow.
-
take_loan_on_vestingFinancialTake a loan against a vesting schedule.
-
updown_betFinancialPlace a bullish or bearish bet on the current UPDOWN round. Auto-approves USDB and pre-checks balance + minBet client-side. Use slippage_percent for an optional minShares guard.
-
updown_claimFinancialClaim winnings or refund from a settled UPDOWN round. Pre-checks via quoteClaimPayout — refuses to send if 0.
-
vault_borrowFinancialBorrow USDB against locked wSTASIS. 2% + 0.005%/day.
-
vault_repayFinancialRepay vault loan.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.