Critical-risk tools in Sap

Critical severity Sap MCP Server 113 of 453 tools

113 of the 453 tools in Sap are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

jupiter_cancelDCA Destructive

Create an unsigned transaction to cancel a DCA recurring order. SAP MCP context: Jupiter protocol tools are served as AgentKit ecosystem tools. Use them for quote, route, and sw...
jupiter_cancelLimitOrder Destructive

Create an unsigned transaction to cancel a specific limit order. SAP MCP context: Jupiter protocol tools are served as AgentKit ecosystem tools. Use them for quote, route, and s...
jupiter_cancelLimitOrders Destructive

Create unsigned transactions to cancel multiple limit orders in batch. SAP MCP context: Jupiter protocol tools are served as AgentKit ecosystem tools. Use them for quote, route,...
manifest_cancelOrder Destructive

Cancel a limit order on a Manifest market. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_register_a...
metaplex-nft_revokeAuthority Destructive

Revoke (remove) a specific authority. Irreversible for some types. SAP MCP context: Protocol metaplex-nft; operation class write. Use for Metaplex NFT collection, mint, metadata...
openbook_cancelOrder Destructive

Cancel an open order on an Openbook market. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_register_...
sap_revoke_attestation Destructive

Revoke attestation for an agent wallet. SAP MCP context: Reputation and trust flow. Use after verifying the target agent PDA or wallet and keep hashes/attestation metadata stabl...
sap_revoke_feedback Destructive

Revoke feedback for an agent wallet. SAP MCP context: Reputation and trust flow. Use after verifying the target agent PDA or wallet and keep hashes/attestation metadata stable a...
spl-token_burn Destructive

Burn SPL tokens from the owner's token account. SAP MCP context: Protocol spl-token; operation class write. Use for SPL token deploy, mint, transfer, burn, freeze, thaw, and aut...
3land_buyNFT Financial

Purchase an NFT from a 3.Land listing. SAP MCP context: Protocol 3land; operation class write. Use for 3.Land NFT collection, minting, listing, cancellation, and purchase flows....
3land_mintAndList Financial

Mint an NFT on 3.Land and automatically list it for sale. SAP MCP context: Protocol 3land; operation class write. Use for 3.Land NFT collection, minting, listing, cancellation, ...
adrena_addCollateral Financial

Add collateral to an existing Adrena position. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_regist...
adrena_closePosition Financial

Close a perpetual position on Adrena Protocol. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_regist...
adrena_openPosition Financial

Open a leveraged perpetual position on Adrena Protocol. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_paymen...
adrena_removeCollateral Financial

Remove collateral from an Adrena position. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_register_a...
alldomains_registerDomain Financial

Register a domain on AllDomains (supports multiple TLDs: .abc, .bonk, .poor, etc.). SAP MCP context: Protocol alldomains; operation class write. Use for AllDomains name registra...
bridging_bridgeDeBridge Financial

Bridge tokens across chains via deBridge DLN. Fast cross-chain transfers with deterministic pricing. SAP MCP context: Protocol bridging; operation class write. Use for cross-cha...
bridging_bridgeWormhole Financial

Bridge tokens across chains via Wormhole. Supports Solana ↔ EVM chains. SAP MCP context: Protocol bridging; operation class write. Use for cross-chain asset movement through Wor...
gibwork_createBounty Financial

Create a new bounty on Gib Work with on-chain escrow. SAP MCP context: Protocol gibwork; operation class write. Use for bounty creation, listing, and work submission. Confirm sc...
jupiter_createDCA Financial

Create a Dollar-Cost Averaging (DCA) recurring order. Returns an unsigned transaction. SAP MCP context: Jupiter protocol tools are served as AgentKit ecosystem tools. Use them f...
jupiter_createLimitOrder Financial

Create a limit order. Returns an unsigned transaction — sign and submit via executeTrigger. SAP MCP context: Jupiter protocol tools are served as AgentKit ecosystem tools. Use t...
jupiter_executeDCA Financial

Submit a signed DCA order creation/cancellation transaction. SAP MCP context: Jupiter protocol tools are served as AgentKit ecosystem tools. Use them for quote, route, and swap ...
jupiter_executeOrder Financial

Execute a signed swap transaction obtained from getOrder and receive execution status. SAP MCP context: Jupiter protocol tools are served as AgentKit ecosystem tools. Use them f...
jupiter_executeTrigger Financial

Submit a signed limit-order transaction for on-chain execution. SAP MCP context: Jupiter protocol tools are served as AgentKit ecosystem tools. Use them for quote, route, and sw...
jupiter_smartSwap Financial

Smart Swap — all-in-one compound tool that fetches a quote and builds swap instructions in a single call. Provide input/output mints, amount, and wallet address to get back a qu...
jupiter_swap Financial

Build an unsigned swap transaction from a quote response. Sign and send the returned transaction. SAP MCP context: Jupiter protocol tools are served as AgentKit ecosystem tools....
jupiter_universal_deposit_quote Financial

Jupiter Universal Deposit: generate a deposit address to bridge funds from any EVM chain (Ethereum, Base, Arbitrum, etc.) to Solana USDC. Powered by Relay.link — same infrastruc...
lulo_deposit Financial

Deposit into the best APR lending protocol via Lulo aggregator. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sa...
lulo_withdraw Financial

Withdraw from Lulo lending position. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_register_agent, ...
magicblock_deposit Financial

Build an unsigned transaction to deposit SPL tokens from Solana into an Ephemeral Rollup. Then use sap_preview_transaction, sap_sign_transaction, and sap_submit_signed_transacti...
magicblock_swap Financial

Build an unsigned swap transaction from a quote. 'public' mode passes through Jupiter. 'private' mode routes output through a scheduled private transfer: requires destination, m...
magicblock_transfer Financial

Build an unsigned SPL token transfer through an Ephemeral Rollup. Use this only when private visibility or an ephemeral balance is explicitly requested. For an ordinary public b...
magicblock_withdraw Financial

Build an unsigned transaction to withdraw SPL tokens from an Ephemeral Rollup back to Solana. Then use sap_preview_transaction, sap_sign_transaction, and sap_submit_signed_trans...
manifest_placeLimitOrder Financial

Place a limit order on a Manifest market. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_register_ag...
meteora_addDLMMLiquidity Financial

Add liquidity to a Meteora DLMM pool with a distribution strategy. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan,...
meteora_createDynamicPool Financial

Create a Meteora Dynamic AMM pool. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_register_agent, sa...
meteora_removeDLMMLiquidity Financial

Remove liquidity from a Meteora DLMM position. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_regist...
openbook_createMarket Financial

Create a new Openbook DEX market for a token pair. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_re...
openbook_placeOrder Financial

Place an order on an Openbook market. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_register_agent,...
orca_closePosition Financial

Close a Whirlpool position and collect all fees/rewards. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payme...
orca_collectFees Financial

Collect accumulated fees from a Whirlpool position. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_r...
orca_openPosition Financial

Open a concentrated liquidity position on an Orca Whirlpool. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_p...
orca_swap Financial

Swap tokens on an Orca Whirlpool. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_register_agent, sap...
pump_launchToken Financial

Launch a new token on Pump.fun via PumpPortal. Optionally include an initial dev buy. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_a...
pump_trade Financial

Buy or sell tokens on Pump.fun bonding curve. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_registe...
raydium-pools_addLiquidity Financial

Add liquidity to a Raydium pool (CPMM, CLMM, or AMM v4). SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payme...
raydium-pools_createAMMv4 Financial

Create a Raydium AMM v4 pool (requires an existing Openbook market). SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_pla...
raydium-pools_createCLMM Financial

Create a Raydium CLMM (Concentrated Liquidity) pool with a price range. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_...
raydium-pools_createCPMM Financial

Create a Raydium CPMM (Constant Product Market Maker) pool. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_pa...
raydium-pools_removeLiquidity Financial

Remove liquidity from a Raydium pool. SAP MCP context: This Synapse AgentKit tool is served beside the sap_* SDK tools. Use sap_agent_identity_plan, sap_payments_register_agent,...
sap_adrena_build_add_limit_order Financial

Build an unsigned transaction to place a limit order on Adrena. The order fills when the oracle price reaches the trigger price. Returns transactionBase64 only after builder-sid...
sap_adrena_build_add_liquidity Financial

Build an unsigned transaction to add liquidity to an Adrena pool. Deposits collateral and receives LP tokens. Returns transactionBase64 only after builder-side RPC simulation pa...
sap_adrena_build_add_locked_stake Financial

Build an unsigned transaction to add a locked stake on Adrena. LP tokens are locked for a specified duration. Returns transactionBase64 only after builder-side RPC simulation pa...
sap_adrena_build_claim_stakes Financial

Build an unsigned transaction to claim staking rewards on Adrena. Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only when safeToApprove=...
sap_adrena_build_close_commodity_long Financial

Build an unsigned transaction to close a long commodity position on Adrena. Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only when safe...
sap_adrena_build_close_long Financial

Build an unsigned transaction to close a long perp position on Adrena. Default closes 100% at market price. Returns transactionBase64 only after builder-side RPC simulation pass...
sap_adrena_build_close_short Financial

Build an unsigned transaction to close a short perp position on Adrena. Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only when safeToAp...
sap_adrena_build_modify_position Financial

Build an unsigned transaction to modify an existing Adrena position by adding collateral. Uses openOrIncreasePosition which atomically adds collateral to an existing position. T...
sap_adrena_build_open_commodity_long Financial

Build an unsigned transaction to open a long position on a synthetic commodity (XAU, XAG, WTI) on Adrena only after policy, balance, oracle-readiness, and simulation checks pass...
sap_adrena_build_open_commodity_short Financial

Build an unsigned transaction to open a short position on a synthetic commodity (XAU, XAG, WTI) on Adrena only after policy, balance, oracle-readiness, and simulation checks pas...
sap_adrena_build_open_short Financial

Build an unsigned transaction to open or increase a short perp position on Adrena only after policy, balance, oracle-readiness, and simulation checks pass. Collateral must be US...
sap_adrena_build_position_package Financial

Build a single unsigned transaction that atomically opens a perp position AND sets stop loss AND take profit only after policy, balance, oracle-readiness, and simulation checks ...
sap_adrena_build_remove_liquid_stake Financial

Build an unsigned transaction to remove a liquid stake on Adrena (unstake LP tokens). Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only...
sap_adrena_build_remove_liquidity Financial

Build an unsigned transaction to remove liquidity from an Adrena pool. Burns LP tokens and receives collateral. Returns transactionBase64 only after builder-side RPC simulation ...
sap_adrena_build_set_take_profit Financial

Build an unsigned transaction to set take profit on an Adrena position. Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only when safeToAp...
sap_adrena_trade_intent Financial

Intent-level Adrena trading API. Pass market name, side, USD collateral, and leverage (or "max"). Resolves custody, collateral, prices, policy, balance, oracle-readiness, and si...
sap_build_agent_register_transaction Financial

Hosted-safe unsigned builder for register_agent. Browser runtimes preview this transaction, the owner wallet approves and signs locally, then it goes through the Steve signed-tr...
sap_build_agent_report_calls_transaction Financial

Hosted-safe unsigned builder for report_calls. The agent owner wallet signs locally after serving calls to consumers. SAP MCP context: Direct synapse-sap-sdk wrapper served by t...
sap_build_sol_transfer Financial

Build an unsigned native SOL transfer transaction using SystemProgram.transfer. Returns serialized base64 transaction for the agent to sign locally with sap_payments_finalize_tr...
sap_build_spl_transfer Financial

Build an unsigned SPL token transfer transaction. Returns serialized base64 transaction for the agent to sign locally with sap_payments_finalize_transaction or sap_sign_transact...
sap_cancel_subscription Financial

Cancel a recurring subscription. SAP MCP context: Payment and settlement flow. Estimate or fetch state before creating escrows or settling calls; write operations require an ena...
sap_close_escrow_v2 Financial

Local-signer-only direct close for an empty V2 escrow. Hosted users should call sap_escrow_build_close_transaction and finalize locally. SAP MCP context: Payment and settlement ...
sap_create_escrow_v2 Financial

Local-signer-only direct V2 escrow creation using SDK EscrowV2Module.create. Defaults to DisputeWindow settlementSecurity=2; SelfReport/0 is rejected. Hosted accountless SAP MCP...
sap_create_subscription Financial

Create a recurring subscription for an agent wallet. SAP MCP context: Payment and settlement flow. Estimate or fetch state before creating escrows or settling calls; write opera...
sap_deposit_escrow_v2 Financial

Local-signer-only direct deposit into a V2 escrow. Hosted users should call sap_escrow_build_deposit_transaction and finalize locally. SAP MCP context: Payment and settlement fl...
sap_deposit_stake Financial

Deposit additional stake for an agent wallet. SAP MCP context: SAP protocol staking flow. Confirm agent wallet, amount, and unstake timing before writes; this is distinct from e...
sap_escrow_build_close_transaction Financial

Hosted-safe unsigned builder for close_escrow_v2. The depositor signs locally; the builder refuses to close until balance and pendingAmount are both zero. SAP MCP context: Hoste...
sap_escrow_build_create_transaction Financial

Hosted-safe unsigned builder for create_escrow_v2. Use this from hosted SAP MCP, preview the result, then call local sap_payments_finalize_transaction with submit:true. The depo...
sap_escrow_build_deposit_transaction Financial

Hosted-safe unsigned builder for deposit_escrow_v2. Use this when a hosted workflow needs to add funds to an existing V2 escrow, then finalize locally with sap_payments_finalize...
sap_escrow_build_finalize_transaction Financial

Hosted-safe unsigned builder for finalize_settlement. Use after the dispute window has elapsed and a pending settlement exists; any payerWallet can locally sign to crank finaliz...
sap_escrow_build_settle_transaction Financial

Hosted-safe unsigned builder for settle_calls_v2. The agent owner wallet signs locally. DisputeWindow escrows create a pending settlement PDA; CoSigned escrows require the coSig...
sap_escrow_build_withdraw_transaction Financial

Hosted-safe unsigned builder for withdraw_escrow_v2. The depositor signs locally and can only withdraw unlocked balance after pending amounts are excluded. SAP MCP context: Host...
sap_finalize_settlement_v2 Financial

Local-signer-only direct finalization of a V2 pending settlement. Hosted users should call sap_escrow_build_finalize_transaction and finalize locally. SAP MCP context: Payment a...
sap_fund_subscription Financial

Fund a recurring subscription. SAP MCP context: Payment and settlement flow. Estimate or fetch state before creating escrows or settling calls; write operations require an enabl...
sap_init_stake Financial

Initialize stake for an agent wallet. SAP MCP context: SAP protocol staking flow. Confirm agent wallet, amount, and unstake timing before writes; this is distinct from external ...
sap_payments_fund_prepaid Financial

Hosted paid tool that creates a prepaid session. The x402 charge for this tool IS the funding deposit. After settlement, creates a prepaid credit session with the specified amou...
sap_perpspad_build_dbc_dev_buy Financial

DEPRECATED alias; use sap_steve_launch_build_dbc_dev_buy. Legacy DBC-only initial-buy builder. New integrations must use sap_meteora_build_launchpad_trade, which supports buy/se...
sap_perpspad_build_escrow_launch Financial

Build an escrow-backed PerpsPad launch (creator-split Option B): derives the trustless escrow PDA from the NEW token mint, swaps the launch creatorAddress to that PDA, and retur...
sap_perpspad_build_launch Financial

Build a PerpsPad token launch backed by a leveraged perp: returns the UNSIGNED config + pool transactions. This tool does NOT broadcast anything — sign and send BOTH transaction...
sap_perpspad_launch_dbc Financial

DEPRECATED alias; use sap_steve_launch_build_dbc. Build a Steve-native direct Meteora DBC launch: create config, initialize pool, transfer creator authority to the 70/30 escrow ...
sap_phoenix_build_deposit Financial

Build an unsigned USDC deposit transaction into a Phoenix trader account. Returns transactionBase64 for browser approval. Requires an ACTIVATED trader: check sap_phoenix_get_tra...
sap_phoenix_build_place_limit_order Financial

Build an unsigned Phoenix limit order transaction. Pass authority, symbol, side, priceUsd (human limit price, e.g. "106.50"), baseUnits (human size). Raw priceInTicks/numBaseLot...
sap_phoenix_build_place_market_order Financial

Build an unsigned Phoenix market order transaction. Pass authority, symbol, side (bid=buy, ask=sell), and baseUnits (human size, e.g. "0.01" SOL). numBaseLots raw lots also acce...
sap_phoenix_build_withdraw Financial

Build an unsigned USDC withdraw transaction from a Phoenix trader account. Returns transactionBase64. SAP MCP execution guidance: Intent: hosted unsigned transaction builder. P...
sap_request_unstake Financial

Request unstake for an agent wallet. SAP MCP context: SAP protocol staking flow. Confirm agent wallet, amount, and unstake timing before writes; this is distinct from external A...
sap_settle_escrow_v2 Financial

Local-signer-only direct settlement against a V2 escrow. Hosted users should call sap_escrow_build_settle_transaction and finalize locally. SAP MCP context: Payment and settleme...
sap_sign_transaction Financial

Sign a serialized Solana transaction with the configured SAP MCP signer after sap_preview_transaction. This is the supported non-custodial signing path for agents; never read ke...
sap_sns_register_agent_domain Financial

Temporarily unavailable. SAP MCP does not currently publish an SNS registration write path because the historical Bonfida SNS npm package is not installable from npmjs. Use this...
sap_steve_launch_build_dbc Financial

Build a Steve-native direct Meteora DBC launch: create config, initialize pool, transfer creator authority to the 70/30 escrow PDA, then initialize escrow. A requested initial b...
sap_steve_launch_build_dbc_dev_buy Financial

Legacy DBC-only initial-buy builder. New integrations must use sap_meteora_build_launchpad_trade, which supports buy/sell, exact decimal amounts, curve-capacity errors, and auto...
sap_sunrise_execute_quote Financial

Execute a signed Sunrise swap: submits the user-signed transaction from sap_sunrise_get_quote. Poll by re-calling with IDENTICAL arguments while status is 'SUBMITTED'; stop at '...
sap_withdraw_escrow_v2 Financial

Local-signer-only direct withdrawal from a V2 escrow. Hosted users should call sap_escrow_build_withdraw_transaction and finalize locally. SAP MCP context: Payment and settlemen...
sap_x402_build_headers_from_escrow Financial

Build SAP x402 HTTP headers by fetching escrow data for an agent wallet with SDK X402Registry.buildPaymentHeadersFromEscrow. SAP MCP context: Payment and settlement flow. Estima...
sap_x402_build_payment_headers Financial

Build SAP x402 HTTP headers from a public PaymentContext returned by sap_x402_prepare_payment. SAP MCP context: Payment and settlement flow. Estimate or fetch state before creat...
sap_x402_prepare_payment Financial

Prepare an x402 payment context using SDK X402Registry.preparePayment. New production escrow funding should use Escrow V2 fields and nonce-aware flows. SAP MCP context: Payment ...
sap_x402_settle Financial

Settle served x402 calls through SDK X402Registry.settle. Must be called by the agent owner wallet. SAP MCP context: Payment and settlement flow. Estimate or fetch state before ...
sap_x402_settle_batch Financial

Batch-settle served x402 calls through SDK X402Registry.settleBatch. Must be called by the agent owner wallet. SAP MCP context: Payment and settlement flow. Estimate or fetch st...
send-arcade_playGame Financial

Enter and play a game on Send Arcade (pays entry fee via transaction). SAP MCP context: Protocol send-arcade; operation class write. Use for Send Arcade game listing and play fl...
spl-token_transfer Financial

Transfer SPL tokens between wallets. Optionally creates the recipient ATA. SAP MCP context: Protocol spl-token; operation class write. Use for SPL token deploy, mint, transfer, ...
spl-token_transferSol Financial

Transfer native SOL between wallets via SystemProgram.transfer. SAP MCP context: Protocol spl-token; operation class write. Use for SPL token deploy, mint, transfer, burn, freez...
staking_stakeJupSOL Financial

Stake SOL for jupSOL (Jupiter liquid staking). Instant liquidity, auto-compounding. SAP MCP context: Protocol staking; operation class write. Use for SOL and liquid staking flow...
staking_stakeSOL Financial

Stake native SOL to a validator. Creates a stake account and delegates. SAP MCP context: Protocol staking; operation class write. Use for SOL and liquid staking flows. Confirm v...
staking_stakeSolayer Financial

Stake SOL for sSOL via Solayer. Re-staking protocol with additional yield. SAP MCP context: Protocol staking; operation class write. Use for SOL and liquid staking flows. Confir...

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Sap

Tools at critical risk

Attacks that target this class

More on Sap

Enforce policy on every Sap tool call.