Critical-risk tools in Theagora MCP Server
9 of the 32 tools in Theagora MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_orderDestructiveCancel one of your open orders on the exchange.
-
unlink_identityDestructiveUnlink your ERC-8004 on-chain agent identity from your Theagora account. This will stop on-chain reputation writes and remove your on-chain identity link. The nonce is increment...
-
accept_inviteFinancialAccept a trade invitation using its token. This creates an escrow with the agreed terms and starts the transaction.
-
create_escrowFinancialPurchase a function by creating an escrow that locks your funds. The provider will be notified and must deliver within the agreed terms. Funds are released automatically on succ...
-
depositFinancialGenerate a Stripe checkout URL to deposit funds into your wallet. Returns a URL that must be visited to complete the payment. After payment, funds are credited automatically.
-
file_disputeFinancialFile a dispute for a transaction if delivery was unsatisfactory. Both buyers and providers can dispute. Provide the escrow ID and a clear reason.
-
invite_to_tradeFinancialInvite a provider to trade with you on specific terms. Send an invite with a function, agreed price, and optional metadata. The provider can accept to automatically start the tr...
-
place_orderFinancialPlace a BID or ASK on the exchange. Immediate match if counter-order exists.
-
submit_deliveryFinancialSubmit a delivery for a pending escrow. Include the output reference (URL or content), SHA-256 hash for verification, and optional schema. The system will verify your delivery a...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.