High-risk tools in Bitcoin SV MCP Server
9 of the 80 tools in Bitcoin SV MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
bap_friendExecuteInitiates a friend request to another BAP ID by broadcasting an on-chain MAP transaction.
-
wallet_decryptExecuteDecrypts data using wallet keys.
-
wallet_encryptExecuteEncrypts data using wallet keys. protocolID is a JSON array like [2,
-
wallet_proveCertificateExecuteProves select fields of a certificate to a verifier.
-
wallet_signActionExecuteSigns a transaction previously created with createAction (when signAndProcess was false).
-
wallet_signBsmExecuteSign a message using BSM (Bitcoin Signed Message) format
-
utils_installAgentMasterExecuteInstall the Agent Master CLI tool for managing MCP server configurations across multiple platforms (Claude, VS Code, Cursor, etc.)
-
wallet_createHmacExecuteCreates an HMAC using wallet keys.
-
wallet_createSignatureExecuteCreates a digital signature using wallet keys.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.