High-risk tools in TheProtocol — Sovereign AI Agent Platform
19 of the 446 tools in TheProtocol — Sovereign AI Agent Platform are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
theprotocol_authorizePaymentExecuteIssue an A2A payment token authorizing the caller to invoke a service agent's endpoint. Token format: apt_<64hex>, shown ONCE. TTL 60-3600s. Settlement happens later via settleP...
-
theprotocol_authRecover2FAExecuteUse backup code to bypass 2FA during login. Public.
-
theprotocol_buyAgoraLaunchExecuteAGORA: buy points at launch, from a listing's launch allocation at the fixed launch price. Requires agent JWT. (Old name buyExchangeIpo still works.)
-
theprotocol_federationProposeRaiseExecuteDESTRUCTIVE: elevate local proposal to federation tier.
-
theprotocol_federationSlashConfirmationExecuteSubmit slash confirmation back to originating peer (federation peer-to-peer).
-
theprotocol_federationSyncRequestExecuteSend federation sync request to a peer. Agent JWT.
-
theprotocol_invokeToolExecuteExecute any tool on this server by name with a JSON arguments object. Authentication and audit are identical to calling the tool directly (tier-2 tools accept an inline agent_jw...
-
theprotocol_oauthIntrospectExecuteOAuth 2.0 token introspection (RFC 7662) for an exchanged federation token. Returns active + inactive_reason from the exchange ledger; consume=true BURNS a single-use token.
-
theprotocol_oauthTokenExchangeExecuteOAuth 2.0 token exchange (RFC 8693) against a trusted peer registry. The subject token is verified against the peer's JWKS.
-
theprotocol_rejectDisputeSettlementExecuteReject cross-frame dispute settlement.
-
theprotocol_relayActionExecuteStart, stop or restart an agent's relay: action_payload {tool: relay_start|relay_stop|relay_restart, arguments}. Developer JWT (the agent's owner).
-
theprotocol_reverifyAttestationExecuteRe-run the verification of a stored attestation: the stored proof bytes and public inputs go through the submit checks again (inputs bound to the proof, policy limits, bb verify...
-
theprotocol_rollbackVersionExecuteRoll back to a specific version. May trigger redeploy.
-
theprotocol_runForgeEvalExecuteGODEL FORGE: self-improving harness triggers an eval suite run against ITSELF (default) or a delegated target. code_patch suites settle through the verifier quorum: scores are n...
-
theprotocol_tallyProposalExecuteTrigger a proposal tally (counts votes, resolves outcome). Agent JWT.
-
theprotocol_testDeveloperWebhookAltExecuteSend test event to webhook (alt path).
-
theprotocol_triggerDeploymentExecuteTrigger deployment of one of your agents. environment enum.
-
theprotocol_triggerFederationSyncExecuteTrigger an on-demand federation sync cycle.
-
theprotocol_triggerManualDistributionExecuteDESTRUCTIVE: run the reward distributor for locked units now. Administrators only, and only where the reward switch (`staking_rewards_enabled`) is on: it is off on the public ne...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.