Critical-risk tools in Stacks AI MCP Server
39 of the 200 tools in Stacks AI MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
arkadiko_burn_usdaDestructiveBurn USDA tokens to reduce total supply
-
bitflow_cancel_group_orderDestructiveCancel group order using official SDK
-
bitflow_cancel_keeper_orderDestructiveCancel keeper order using official SDK
-
charisma_cancel_orderDestructiveCancel an open order
-
charisma_revoke_api_keyDestructiveRevoke an API key
-
alex_execute_swapFinancialExecute 1-hop token swap on ALEX AMM via swap-helper
-
alex_execute_swap_2hopFinancialExecute 2-hop token swap via swap-helper-a (token-x/token-y -> token-y/token-z)
-
alex_execute_swap_4hopFinancialExecute 4-hop token swap via swap-helper-c (X->Y->Z->W->V)
-
arkadiko_add_liquidityFinancialAdd liquidity to existing Arkadiko swap pair
-
arkadiko_claim_staking_rewardsFinancialClaim pending staking rewards
-
arkadiko_close_vaultFinancialClose Arkadiko vault and repay all debt
-
arkadiko_complete_cdp_workflowFinancialComplete CDP workflow: Create vault, mint USDA, and manage position
-
arkadiko_complete_governance_workflowFinancialComplete governance workflow: Stake DIKO, create proposal, and vote
-
arkadiko_create_vaultFinancialCreate new Arkadiko vault for minting USDA stablecoin
-
arkadiko_stake_dikoFinancialStake DIKO tokens to earn rewards and voting power
-
arkadiko_swap_tokensFinancialSwap tokens on Arkadiko DEX
-
bitflow_create_group_orderFinancialCreate group order for scheduled execution using official SDK
-
bitflow_create_keeper_orderFinancialCreate keeper order for automated execution using official SDK
-
bitflow_execute_btc_to_sbtc_keeper_orderFinancialExecute complete BTC to sBTC swap using Keeper system
-
bitflow_execute_token_swap_with_keeperFinancialExecute token swap using Keeper system for automated execution
-
bitflow_setup_dca_ordersFinancialSetup Dollar Cost Averaging (DCA) orders using group orders
-
charisma_complete_swap_workflowFinancialComplete swap workflow: quote, create order, execute
-
charisma_create_orderFinancialCreate new limit or triggered order
-
charisma_execute_multihop_swapFinancialExecute multihop swap via Blaze routing
-
granite_add_collateralFinancialDeposit BTC (sBTC) as collateral to enable borrowing
-
granite_borrowFinancialBorrow stablecoins against BTC collateral on Granite
-
granite_depositFinancialDeposit stablecoins to earn passive yield from borrowers
-
granite_finalize_unstakeFinancialFinalize unstaking after waiting period expires
-
granite_flash_loanFinancialExecute uncollateralized flash loan (must repay + fee in same tx)
-
granite_liquidateFinancialLiquidate undercollateralized borrower position for profit
-
granite_redeemFinancialRedeem LP tokens for underlying stablecoin assets
-
granite_remove_collateralFinancialWithdraw collateral if health factor allows
-
granite_repayFinancialRepay borrowed stablecoins to reduce debt
-
granite_stakeFinancialStake LP tokens to earn additional rewards
-
granite_withdrawFinancialWithdraw supplied assets plus earned interest
-
send_stxFinancialSend STX tokens to another address
-
stack_stxFinancialStack STX tokens for a specified duration
-
transfer_ftFinancialTransfer fungible tokens to another address
-
velar_execute_swapFinancialExecute token swap on Velar DEX with optimal routing
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.