High-risk tools in BNB Chain MCP

High severity BNB Chain MCP MCP Server 38 of 1240 tools

38 of the 1240 tools in BNB Chain MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

cancel_proposal Execute

Cancel a proposal (only proposer or if proposer
make_app_clear_txn Execute

Create an application clear state transaction
BinanceNewUserDataStream Execute

Create a new user data stream to receive account updates via WebSocket.
compile_teal Execute

Compile TEAL source code
deploy_contract Execute

Deploy a smart contract from bytecode and constructor arguments
deploy_create2 Execute

Deploy a contract using CREATE2 for deterministic addresses across chains
deploy_proxy Execute

Deploy a proxy contract (UUPS or TransparentUpgradeableProxy) pointing to an implementation
execute_multicall Execute

Execute multiple contract calls in a single transaction
execute_proposal Execute

Execute a queued proposal after timelock delay
gateway_execute_rpc Execute

Execute blockchain RPC calls through Tatum
geckoterminal_new_pools Execute

Get newly created pools across all networks or on a specific network - catch new token launches early
parse_units Execute

Convert a human-readable value to its smallest unit (e.g., ETH to wei)
plugins_execute Execute

Execute a plugin function through the SperaxOS gateway. Routes the request to the appropriate plugin API and returns the result.
wait_for_transaction Execute

Wait for a transaction to be confirmed (mined). Polls the network until confirmation.
abi_encode Execute

ABI encode parameters (standard Solidity encoding)
api_ultrade_wallet_signin Execute

Sign in to trading account
BinanceDeliveryChangePositionMode Execute

Change COIN-M Futures position mode between Hedge Mode and One-way Mode.
BinanceOptionsRenewListenKey Execute

Extend the validity of an options listen key by 60 minutes. Should be called periodically to keep the user data stream active.
call_api_endpoint Execute

call an endpoint in the HIVE API. Note: use the category endpoints to get the list of endpoints and
hash_message Execute

Hash a message using EIP-191 format
hash_typed_data Execute

Hash typed structured data according to EIP-712
queue_proposal Execute

Queue a successful proposal for execution (requires Timelock)
sign_bytes Execute

Sign arbitrary bytes with a secret key
sign_message Execute

Sign a message using personal_sign (EIP-191)
sign_transaction Execute

Sign a transaction with a secret key
sign_typed_data Execute

Sign typed data using EIP-712
simulate_bundle Execute

Simulate a bundle of transactions to check execution and returns
simulate_raw_transactions Execute

Simulate raw transactions
simulate_transaction Execute

Simulate a transaction to check for potential issues before execution
simulate_transactions Execute

Simulate transactions with detailed configuration
upgrade_proxy Execute

Upgrade a proxy contract to a new implementation address
cast_vote Execute

Cast a vote on a governance proposal
create_erc20_token Execute

Create a new ERC20 token
create_permit_signature Execute

Create an EIP-2612 permit signature for gasless token approvals
make_app_call_txn Execute

Create an application call transaction
make_app_closeout_txn Execute

Create an application close out transaction
make_app_update_txn Execute

Create an application update transaction
write_contract Execute

Write data to a smart contract by calling a state-changing function

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in BNB Chain MCP

Tools at high risk

Attacks that target this class

More on BNB Chain MCP

Enforce policy on every BNB Chain MCP tool call.