High-risk tools in COTI MCP Server
5 of the 44 tools in COTI MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
compile_and_deploy_contractExecute 4/5Compiles Solidity source code and immediately deploys it to the COTI blockchain in a single operation. This tool avoids bytecode truncation issues that can occur when passing la...
-
compile_contractExecute 3/5Compiles Solidity source code without deploying it to the blockchain. Returns bytecode, ABI, and compilation metadata (compiler version, EVM version, optimization settings). Use...
-
deploy_private_erc20_contractExecute 4/5Deploy a new standard private ERC20 token contract on the COTI blockchain. This creates a new private token with the specified name, symbol, and decimals. Returns the deployed c...
-
deploy_private_erc721_contractExecute 4/5Deploy a new standard private ERC721 NFT contract on the COTI blockchain. This creates a new private NFT collection with the specified name and symbol. Returns the deployed cont...
-
deploy_private_message_contractExecute 4/5Deploys the PrivateMessage contract on the COTI blockchain. This contract allows sending encrypted messages to specific addresses. Only the intended recipient can decrypt a mess...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.
More on COTI MCP Server
Enforce policy on COTI MCP Server
One command generates a policy scaffold for every server in your MCP config.
npx -y @policylayer/intercept init