High-risk tools in Tenzro Ledger MCP
25 of the 275 tools in Tenzro Ledger MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
assign_taskExecuteAssign a task to a specific agent.
-
axelar_call_contractExecuteDispatch an Axelar GMP `call_contract` message.
-
babylon_submit_finality_signatureExecuteSubmit an EOTS over a Tenzro block hash.
-
canton_submit_commandExecuteSubmit a DAML create or exercise command.
-
chat_completionExecuteSend a chat completion request to a served model and return the response.
-
chat_streamExecuteSend a chat completion request and stream the response token by token.
-
create_swarmExecuteCreate a multi-agent swarm with the specified number of members.
-
deploy_contractExecuteDeploy bytecode to the EVM, SVM, or DAML runtime.
-
derive_keyExecuteDerive a child key from a seed using the given derivation path.
-
encode_functionExecuteABI-encode a smart contract function call. Returns hex-encoded calldata.
-
encrypt_dataExecuteEncrypt data using AES-256-GCM. Returns ciphertext with nonce and tag.
-
hyperlane_dispatchExecuteDispatch a Hyperlane V3 message through the canonical Mailbox.
-
rotate_validator_keyExecuterotate_validator_key
-
send_agent_messageExecuteSend a message from one agent to another via the A2A protocol.
-
serve_modelExecuteStart serving a model for inference on this node.
-
sign_messageExecuteSign a message with the auth-bound wallet (FROST-Ed25519 + ML-DSA-65 hybrid).
-
spawn_agentExecuteSpawn a child agent from a parent identity with a specific role.
-
stop_modelExecuteStop serving a model on this node.
-
submit_daml_createExecuteSubmit a DAML ``create`` command on the shared Canton domain.
-
submit_daml_exerciseExecuteSubmit a DAML ``exercise`` command on an existing contract.
-
use_registered_toolExecuteInvoke a registered tool with the given input data.
-
use_skillExecuteInvoke a registered skill with the given input data.
-
workflow_openExecuteOpen a multi-agent saga workflow. `saga_steps` is a list of
-
workflow_step_executeExecuteExecute a saga step (Pending -> Executing). If `escrow_amount` is set,
-
x25519_key_exchangeExecutePerform X25519 Diffie-Hellman key exchange. Returns shared secret.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.