Critical-risk tools in Agenti
18 of the 73 tools in Agenti are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
binance_cancel_orderDestructiveCancel an open order by orderId or clientOrderId. Requires BINANCE_API_KEY + BINANCE_SECRET_KEY.
-
jupiter_swapFinancialExecute a token swap via Jupiter v6 aggregator. Best-route swap across all Solana DEXes. Requires AGENTI_SOLANA_PRIVATE_KEY.
-
solana_deploy_tokenFinancialDeploy a new SPL token on Solana with custom name, symbol, decimals, and supply. Requires AGENTI_SOLANA_PRIVATE_KEY.
-
agenti_payFinancialMake an HTTP request and automatically pay if the server requires x402 payment. Returns the response body as a string.
-
bnb_transferFinancialSend BEP-20 tokens (USDT, BUSD, or any BEP-20) to an address on BNB Chain
-
payFinancialPay for an HTTP resource — automatically handles 402 Payment Required (x402 protocol)
-
solana_transferFinancialSend SOL or any SPL token to another Solana address. Requires AGENTI_SOLANA_PRIVATE_KEY.
-
binance_place_orderFinancialPlace a market or limit buy/sell order. Requires BINANCE_API_KEY + BINANCE_SECRET_KEY.
-
bitrefill_check_orderFinancialPoll a Bitrefill invoice until it completes and return the redemption code.
-
bnb_swapFinancialSwap BEP-20 tokens on PancakeSwap V3 (requires private key)
-
pump_buyFinancialBuy a pump.fun token with SOL. Works on bonding curve and graduated (PumpSwap AMM) tokens. Requires AGENTI_SOLANA_PRIVATE_KEY.
-
pump_sellFinancialSell a pump.fun token back to SOL. Works on bonding curve and graduated tokens. Requires AGENTI_SOLANA_PRIVATE_KEY.
-
solana_stakeFinancialStake SOL via Sanctum liquid staking to earn yield. Returns an LST (liquid staking token). Requires AGENTI_SOLANA_PRIVATE_KEY.
-
solana_swapFinancialSwap any Solana token via Jupiter aggregator (best route). Requires AGENTI_SOLANA_PRIVATE_KEY.
-
agenti_receiveFinancialCreate a payment invoice so another party can send funds to this agent.
-
bitrefill_create_invoiceFinancialCreate a Bitrefill invoice for a product. Returns a crypto payment address (USDC by default) that can be passed to the pay tool.
-
create_invoiceFinancialCreate a payment request — returns an address and amount for someone to pay you
-
gmgn_copy_tradeFinancialCopy a smart wallet trade: looks up a wallet\
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.