High-risk tools in Sap
40 of the 453 tools in Sap are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
blinks_confirmActionExecuteConfirm a completed Solana Action by sending the tx signature back to the Action provider. SAP MCP context: Protocol blinks; operation class read. Use for Solana Actions and Bli...
-
blinks_executeActionExecuteExecute a Solana Action — sends wallet to the Action endpoint and receives a transaction to sign. SAP MCP context: Protocol blinks; operation class write. Use to execute a Solan...
-
jupiter_swapInstructionsExecuteGet individual swap instructions instead of a full transaction. Useful for composing with other instructions. SAP MCP context: Jupiter protocol tools are served as AgentKit ecos...
-
magicblock_ensureCrankExecuteForce a transfer queue crank attempt for a mint. Use this after a private transfer or private swap if the Hydra delivery crank has not yet delivered funds to the recipient. The ...
-
magicblock_initializeMintExecuteBuild an unsigned transaction that initializes a validator-scoped transfer queue for a mint. Then use sap_preview_transaction, sap_sign_transaction, and sap_submit_signed_transa...
-
magicblock_loginExecuteExchange a signed challenge for a bearer token (step 2 of PER auth flow). The token is used for private-balance and private transfers.. SAP MCP execution guidance: Intent: SAP ...
-
magicblock_requestRandomnessExecuteRequest provably fair on-chain randomness from the MagicBlock VRF oracle (Vrf1RNUjXmQGjmQrQLvJHs9SNkvDJEsRVFPkfSQUwGz). Builds an unsigned transaction that invokes request_rando...
-
sap_adrena_build_add_liquid_stakeExecuteBuild an unsigned transaction to add a liquid stake on Adrena (stake LP tokens). Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only when...
-
sap_adrena_build_cancel_limit_orderExecuteBuild an unsigned transaction to cancel a limit order on Adrena. Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only when safeToApprove=t...
-
sap_adrena_build_cancel_stop_lossExecuteBuild an unsigned transaction to cancel stop loss on an Adrena position. Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only when safeToA...
-
sap_adrena_build_cancel_take_profitExecuteBuild an unsigned transaction to cancel take profit on an Adrena position. Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only when safeT...
-
sap_adrena_build_close_commodity_shortExecuteBuild an unsigned transaction to close a short commodity position on Adrena. Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only when saf...
-
sap_adrena_build_init_user_stakingExecuteBuild an unsigned transaction to initialize a user staking account on Adrena. Must be called before add_liquid_stake or add_locked_stake. Returns transactionBase64 only after bu...
-
sap_adrena_build_open_longExecuteBuild an unsigned transaction to open or increase a long perp position on Adrena only after policy, balance, oracle-readiness, and simulation checks pass. Returns transactionBas...
-
sap_adrena_build_set_stop_lossExecuteBuild an unsigned transaction to set stop loss on an Adrena position. Returns transactionBase64 only after builder-side RPC simulation passes. Show approval only when safeToAppr...
-
sap_adrena_build_swapExecuteBuild an unsigned transaction to swap tokens through an Adrena pool. Uses zero-slippage oracle pricing. Returns transactionBase64 only after builder-side RPC simulation passes. ...
-
sap_adrena_build_trailing_stopExecuteBuild an unsigned transaction to set a trailing stop loss on an Adrena position. Reads the current oracle price and computes the stop loss at the specified percentage distance. ...
-
sap_adrena_simulate_positionExecuteFREE dry-run tool (no x402 charge): checks live Adrena oracle readiness and simulates opening a perp position only when oracle coverage can satisfy the pool. Returns oracleReadi...
-
sap_build_agent_lifecycle_transactionExecuteHosted-safe unsigned builder for the agent lifecycle actions: deactivate_agent, reactivate_agent, close_agent (reclaims rent), and migrate_pricing_menu (one-time backfill of the...
-
sap_meteora_build_launchpad_migrationExecuteBuild an unsigned official Meteora DBC to DAMM v2 migration after the curve reaches its threshold. The destination must be server-allowlisted. Position NFT ephemerals are co-sig...
-
sap_meteora_build_launchpad_tradeExecuteBuild an unsigned exact-in Meteora buy or sell. Routes automatically between an active DBC curve and its graduated DAMM v2 pool; never broadcasts or signs. SAP MCP execution gu...
-
sap_open_vault_sessionExecuteOpen a vault session by 32-byte session hash. SAP MCP context: Memory/session flow. Store only intentionally encrypted payloads or public hashes; session and vault PDAs are visi...
-
sap_perpspad_dbc_config_previewExecuteDEPRECATED alias; use sap_steve_launch_preview_dbc. PRE-LAUNCH DBC economics readout: decodes the exact Meteora DBC config the gateway will sign (scaled per quote decimals) and ...
-
sap_phoenix_build_cancel_allExecuteBuild an unsigned cancel all orders transaction for a Phoenix market. Returns transactionBase64. SAP MCP execution guidance: Intent: hosted unsigned transaction builder. Pricin...
-
sap_phoenix_build_cancel_ordersExecuteBuild an unsigned cancel orders by ID transaction for Phoenix. Returns transactionBase64. SAP MCP execution guidance: Intent: hosted unsigned transaction builder. Pricing: paid...
-
sap_phoenix_build_cancel_stop_lossExecuteBuild an unsigned cancel stop loss transaction for Phoenix. Returns transactionBase64. SAP MCP execution guidance: Intent: hosted unsigned transaction builder. Pricing: paid bu...
-
sap_phoenix_build_onboard_traderExecuteBuild Phoenix trader ACTIVATION instructions (enables all six capabilities incl. deposit). ALWAYS required after register — a RegisterTrader-only account is frozen and every dep...
-
sap_phoenix_build_place_conditional_orderExecuteBuild an unsigned Phoenix conditional order transaction (TP/SL bracket). Returns transactionBase64. SAP MCP execution guidance: Intent: hosted unsigned transaction builder. Pri...
-
sap_phoenix_build_place_stop_lossExecuteBuild an unsigned Phoenix stop loss order transaction. Returns transactionBase64. SAP MCP execution guidance: Intent: hosted unsigned transaction builder. Pricing: paid builder...
-
sap_profile_switchExecuteSwitch the live SAP MCP runtime to another existing profile and reload client, signer, connection, and policy. SAP MCP execution guidance: Intent: SAP MCP tool workflow. Pricin...
-
sap_reactivate_agentExecuteReactivate the connected wallet SAP agent. SAP MCP context: Direct synapse-sap-sdk wrapper served by this MCP. Read tools return on-chain state; write tools require signer polic...
-
sap_session_startExecuteStart a high-level SDK session by session ID. SAP MCP context: Memory/session flow. Store only intentionally encrypted payloads or public hashes; session and vault PDAs are visi...
-
sap_sns_build_manage_record_transactionExecuteTemporarily unavailable. SAP MCP does not currently publish an SNS record write builder because the historical Bonfida SNS npm package is not installable from npmjs. The tool fa...
-
sap_sns_build_set_primary_domain_transactionExecuteTemporarily unavailable. Setting primary SNS domains is disabled in SAP MCP until the SNS write path is migrated to a current installable SDK and covered by end-to-end tests. S...
-
sap_steve_launch_preview_dbcExecutePRE-LAUNCH DBC economics readout: decodes the exact Meteora DBC config the gateway will sign (scaled per quote decimals) and simulates the dev-buy with the official SDK swap mat...
-
sap_strategy_executeExecuteFree local tool. Loads a saved strategy by category and name, resolves trading parameters, validates against trading policy, and returns either a dry-run simulation or a ready-t...
-
sap_sunrise_swap_intentExecuteOne-call Sunrise swap intent: resolves both token SYMBOLS to canonical mints, then fetches a quote with the user's wallets and returns the unsignedTransaction + quoteId + routeN...
-
spl-token_deployTokenExecuteDeploy a new SPL token with Metaplex metadata. Returns the mint address and an unsigned transaction. SAP MCP context: Protocol spl-token; operation class write. Use for SPL toke...
-
spl-token_freezeAccountExecuteFreeze a token account (prevents all transfers). Requires freeze authority. SAP MCP context: Protocol spl-token; operation class write. Use for SPL token deploy, mint, transfer,...
-
spl-token_mintToExecuteMint additional tokens to a destination wallet (requires mint authority). SAP MCP context: Protocol spl-token; operation class write. Use for SPL token deploy, mint, transfer, b...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.