High-risk tools in Tenzro Ledger MCP

High severity Tenzro Ledger MCP MCP Server 37 of 360 tools

37 of the 360 tools in Tenzro Ledger MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

assign_task Execute

Assign a task to a specific agent.
axelar_call_contract Execute

Dispatch an Axelar GMP `call_contract` message.
babylon_submit_finality_signature Execute

Submit an EOTS over a Tenzro block hash.
canton_submit_command Execute

Submit a DAML create or exercise command.
chat_completion Execute

Send a chat completion request to a served model and return the response.
chat_stream Execute

Send a chat completion request and stream the response token by token.
create_swarm Execute

Create a multi-agent swarm with the specified number of members.
database_query Execute

database_query
deploy_contract Execute

Deploy bytecode to the EVM, SVM, or DAML runtime.
derive_key Execute

Derive a child key from a seed using the given derivation path.
download_model Execute

Download a model from verified network providers or HuggingFace Hub.
encode_function Execute

ABI-encode a smart contract function call. Returns hex-encoded calldata.
encrypt_data Execute

Encrypt data using AES-256-GCM. Returns ciphertext with nonce and tag.
hyperlane_dispatch Execute

Dispatch a Hyperlane V3 message through the canonical Mailbox.
moe_forward Execute

Run one distributed MoE layer forward.
rotate_validator_key Execute

rotate_validator_key
send_agent_message Execute

Send a message from one agent to another via the A2A protocol.
set_secure_mint_paused Execute

Trip or clear the per-token issuance circuit breaker. Admin-gated.
sign_message Execute

Sign a message with the auth-bound wallet (FROST-Ed25519 + ML-DSA-65 hybrid).
spawn_agent Execute

Spawn a child agent from a parent identity with a specific role.
stop_model Execute

Stop serving a model on this node.
submit_daml_create Execute

Submit a DAML ``create`` command on the shared Canton domain.
submit_daml_exercise Execute

Submit a DAML ``exercise`` command on an existing contract.
text_embed Execute

Embed one or more strings with a loaded text encoder.
unload_audio_model Execute

Unload a transcription model and free its ONNX sessions.
unload_detection_model Execute

Unload a detection model and free its ONNX session.
unload_forecast_model Execute

Unload a forecast model and free its ONNX session.
unload_segmentation_model Execute

Unload a segmentation model and free its ONNX sessions.
unload_text_segmentation_model Execute

Unload a text-promptable segmentation model and free its sessions.
unload_video_model Execute

Unload a video encoder.
unload_vision_model Execute

Unload an image encoder and free its ONNX session.
use_registered_tool Execute

Invoke a registered tool with the given input data.
use_skill Execute

Invoke a registered skill with the given input data.
vision_embed Execute

Embed a single image with a loaded encoder.
workflow_open Execute

Open a multi-agent saga workflow. `saga_steps` is a list of
workflow_step_execute Execute

Execute a saga step (Pending -> Executing). If `escrow_amount` is set,
x25519_key_exchange Execute

Perform X25519 Diffie-Hellman key exchange. Returns shared secret.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Tenzro Ledger MCP

Tools at high risk

Attacks that target this class

More on Tenzro Ledger MCP

Enforce policy on every Tenzro Ledger MCP tool call.