High-risk tools in Bitcoin SV MCP Server
10 of the 83 tools in Bitcoin SV MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
utils_installAgentMasterExecuteInstall the Agent Master CLI tool for managing MCP server configurations across multiple platforms (Claude, VS Code, Cursor, etc.)
-
wallet_createHmacExecuteCreates an HMAC using wallet keys.
-
wallet_createSignatureExecuteCreates a digital signature using wallet keys. Supply exactly one of data or hashToDirectlySign.
-
wallet_decryptExecuteDecrypts data using wallet keys.
-
wallet_encryptExecuteEncrypts data using wallet keys. protocolID is a JSON array like [2,
-
wallet_proveCertificateExecuteProves select fields of a certificate to a verifier.
-
wallet_signActionExecuteSigns a transaction previously created with createAction (when signAndProcess was false).
-
wallet_signBsmExecuteSign a message using BSM (Bitcoin Signed Message) format
-
wallet_waitForAuthenticationExecuteBlocks until the wallet user is authenticated.
-
x402_requestExecuteRequest any HTTPS service without automatically paying. Returns the response if free, or a BSV payment quote for approval. POST/PUT/PATCH/DELETE may execute if the service does ...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.