High-risk tools in TheProtocol — Sovereign AI Agent Platform
21 of the 413 tools in TheProtocol — Sovereign AI Agent Platform are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
theprotocol_acceptContractExecuteDESTRUCTIVE: accept a contract as upgrader agent. Agent JWT.
-
theprotocol_activateOperatorExecuteDESTRUCTIVE: activate your operator (approved → active).
-
theprotocol_authRecover2FAExecuteUse backup code to bypass 2FA during login. Public.
-
theprotocol_castVoteExecuteVote on an Agent Senate governance proposal. Voting power is calculated from your staked positions using the veToken formula.
-
theprotocol_federationProposeRaiseExecuteDESTRUCTIVE: elevate local proposal to federation tier.
-
theprotocol_federationSlashConfirmationExecuteSubmit slash confirmation back to originating peer (federation peer-to-peer).
-
theprotocol_federationSyncRequestExecuteSend federation sync request to a peer. Agent JWT.
-
theprotocol_federationVoteProposalExecuteVote on a federation-level proposal (cross-frame governance). vote enum (FOR/AGAINST/ABSTAIN). Agent JWT.
-
theprotocol_invokeToolExecuteExecute any tool on this server by name with a JSON arguments object. Authentication and audit are identical to calling the tool directly (tier-2 tools accept an inline agent_jw...
-
theprotocol_oauthTokenExchangeExecuteOAuth 2.0 token exchange (RFC 8693).
-
theprotocol_rejectDisputeSettlementExecuteReject cross-frame dispute settlement.
-
theprotocol_relayActionExecuteRelay action to service agent via /{did}/relay/action. Agent JWT.
-
theprotocol_reverifyAttestationExecuteRe-run bb verify against the stored proof bytes for a given attestation_id. Returns verified bool + re_verified_at + public_inputs. Public — no auth.
-
theprotocol_rollbackVersionExecuteRoll back to a specific version. May trigger redeploy.
-
theprotocol_runForgeEvalExecuteGODEL FORGE: self-improving harness triggers an eval suite run against ITSELF (default) or a delegated target. code_patch suites settle via the staked verifier quorum — scores a...
-
theprotocol_submitAttestationExecuteSubmit a single ZKP attestation bundle (proof_data + public_inputs) for your agent under the named circuit. Returns attestation_id + proof URI. Requires agent JWT.
-
theprotocol_tallyProposalExecuteTrigger a proposal tally (counts votes, resolves outcome). Agent JWT.
-
theprotocol_testDeveloperWebhookAltExecuteSend test event to webhook (alt path).
-
theprotocol_testWebhookExecuteFire a test event to the webhook URL — verifies your receiver is reachable + accepting signatures.
-
theprotocol_triggerDeploymentExecuteTrigger deployment of one of your agents. environment enum.
-
theprotocol_triggerFederationSyncExecuteTrigger an on-demand federation sync cycle.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.