Critical-risk tools in Bitcoin wallet MCP server
20 of the 93 tools in Bitcoin wallet MCP server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
bns_registerFinancialRegister a BNS name via Stacks contract call.
-
btc_combine_utxosFinancialConsolidate all UTXOs into a single output.
-
btc_send_maxFinancialSend maximum possible BTC (sweep) to a single address.
-
btc_send_transferFinancialSend BTC to one or more recipients with sat-denominated amounts.
-
btc_sign_batch_psbtFinancialSign multiple PSBTs in a single call.
-
btc_wallet_send_transferFinancialSend a BTC transfer. Requires explicit user confirmation.
-
ledger_sign_psbtFinancialSign a PSBT using the Ledger Bitcoin app. Requires Ledger
-
ord_create_repeat_inscriptionsFinancialCreate multiple inscriptions in batch. Each content item becomes
-
ord_recover_bitcoinFinancialRecover BTC trapped in the ordinals (taproot) address.
-
ord_send_inscriptionsFinancialSend inscriptions to recipients. Transfers the full UTXO
-
ord_send_inscriptions_splitFinancialSend inscriptions with UTXO splitting. When an inscription
-
sbtc_bridge_withdrawFinancialGet withdrawal information for converting sBTC back to BTC.
-
stx_deploy_contractFinancialDeploy a Clarity smart contract to the Stacks blockchain.
-
stx_revoke_delegationFinancialRevoke stacking delegation via the PoX contract.
-
stx_stackFinancialInitiate STX stacking (solo). Locks STX for reward cycles
-
stx_transfer_sip10_ftFinancialTransfer a SIP-10 fungible token. Calls the token contract
-
stx_transfer_sip9_nftFinancialTransfer a SIP-9 non-fungible token. Calls the NFT contract
-
stx_transfer_stxFinancialTransfer STX to a recipient. Amount in micro-STX (1 STX = 1,000,000 uSTX).
-
swap_executeFinancialExecute a token swap via DEX smart contract call.
-
tx_cancelFinancialCancel a pending BTC transaction via RBF (sends funds back to self).
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.