Critical-risk tools in Manifold

Critical severity Manifold MCP Server 9 of 18 tools

9 of the 18 tools in Manifold are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

cancel_bet Destructive

Cancel a limit order bet
remove_liquidity Destructive

Remove liquidity from market pool
unresolve_market Destructive

Unresolve a previously resolved market
add_bounty Financial

Add bounty to a market
add_liquidity Financial

Add mana to market liquidity pool
award_bounty Financial

Award bounty to a comment
place_bet Financial

Place a bet on a market
sell_shares Financial

Sell shares in a market
send_mana Financial

Send mana to other users

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Manifold

Tools at critical risk

Attacks that target this class

More on Manifold

Enforce policy on every Manifold tool call.