High-risk tools in Sap
37 of the 375 tools in Sap are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
blinks_confirmActionExecuteConfirm a completed Solana Action by sending the tx signature back to the Action provider. SAP MCP context: Protocol blinks; operation class read. Use for Solana Actions and Bli...
-
blinks_executeActionExecuteExecute a Solana Action — sends wallet to the Action endpoint and receives a transaction to sign. SAP MCP context: Protocol blinks; operation class write. Use to execute a Solan...
-
jupiter_swapInstructionsExecuteGet individual swap instructions instead of a full transaction. Useful for composing with other instructions. SAP MCP context: Jupiter protocol tools are served as AgentKit ecos...
-
magicblock_ensureCrankExecuteForce a transfer queue crank attempt for a mint. Use this after a private transfer or private swap if the Hydra delivery crank has not yet delivered funds to the recipient. The ...
-
magicblock_initializeMintExecuteBuild an unsigned transaction that initializes a validator-scoped transfer queue for a mint. Then use sap_preview_transaction, sap_sign_transaction, and sap_submit_signed_transa...
-
magicblock_loginExecuteExchange a signed challenge for a bearer token (step 2 of PER auth flow). The token is used for private-balance and private transfers.. SAP MCP execution guidance: Intent: SAP ...
-
magicblock_requestRandomnessExecuteRequest provably fair on-chain randomness from the MagicBlock VRF oracle (Vrf1RNUjXmQGjmQrQLvJHs9SNkvDJEsRVFPkfSQUwGz). Builds an unsigned transaction that invokes request_rando...
-
sap_adrena_build_add_limit_orderExecuteBuild an unsigned transaction to place a limit order on Adrena. The order fills when the oracle price reaches the trigger price. Returns transactionBase64 for local signing. SA...
-
sap_adrena_build_add_liquid_stakeExecuteBuild an unsigned transaction to add a liquid stake on Adrena (stake LP tokens). Returns transactionBase64 for local signing. SAP MCP execution guidance: Intent: hosted unsigne...
-
sap_adrena_build_add_liquidityExecuteBuild an unsigned transaction to add liquidity to an Adrena pool. Deposits collateral and receives LP tokens. Returns transactionBase64 for local signing. SAP MCP execution gui...
-
sap_adrena_build_add_locked_stakeExecuteBuild an unsigned transaction to add a locked stake on Adrena. LP tokens are locked for a specified duration. Returns transactionBase64 for local signing. SAP MCP execution gui...
-
sap_adrena_build_cancel_limit_orderExecuteBuild an unsigned transaction to cancel a limit order on Adrena. Returns transactionBase64 for local signing. SAP MCP execution guidance: Intent: hosted unsigned transaction bu...
-
sap_adrena_build_cancel_stop_lossExecuteBuild an unsigned transaction to cancel stop loss on an Adrena position. Returns transactionBase64 for local signing. SAP MCP execution guidance: Intent: hosted unsigned transa...
-
sap_adrena_build_cancel_take_profitExecuteBuild an unsigned transaction to cancel take profit on an Adrena position. Returns transactionBase64 for local signing. SAP MCP execution guidance: Intent: hosted unsigned tran...
-
sap_adrena_build_claim_stakesExecuteBuild an unsigned transaction to claim staking rewards on Adrena. Returns transactionBase64 for local signing. SAP MCP execution guidance: Intent: hosted unsigned transaction b...
-
sap_adrena_build_close_commodity_longExecuteBuild an unsigned transaction to close a long commodity position on Adrena. Returns transactionBase64 for local signing. SAP MCP execution guidance: Intent: hosted unsigned tra...
-
sap_adrena_build_close_commodity_shortExecuteBuild an unsigned transaction to close a short commodity position on Adrena. Returns transactionBase64 for local signing. SAP MCP execution guidance: Intent: hosted unsigned tr...
-
sap_adrena_build_init_user_stakingExecuteBuild an unsigned transaction to initialize a user staking account on Adrena. Must be called before add_liquid_stake or add_locked_stake. Returns transactionBase64 for local sig...
-
sap_adrena_build_open_shortExecuteBuild an unsigned transaction to open or increase a short perp position on Adrena. Collateral must be USDC for shorts. Returns transactionBase64 for local signing. SAP MCP exec...
-
sap_adrena_build_position_packageExecuteBuild a single unsigned transaction that atomically opens a perp position AND sets stop loss AND take profit in one transaction. 1 payment, 1 signing, 1 submit — instead of 3 se...
-
sap_adrena_build_remove_liquid_stakeExecuteBuild an unsigned transaction to remove a liquid stake on Adrena (unstake LP tokens). Returns transactionBase64 for local signing. SAP MCP execution guidance: Intent: hosted un...
-
sap_adrena_build_remove_liquidityExecuteBuild an unsigned transaction to remove liquidity from an Adrena pool. Burns LP tokens and receives collateral. Returns transactionBase64 for local signing. SAP MCP execution g...
-
sap_adrena_build_set_stop_lossExecuteBuild an unsigned transaction to set stop loss on an Adrena position. Returns transactionBase64 for local signing. SAP MCP execution guidance: Intent: hosted unsigned transacti...
-
sap_adrena_build_set_take_profitExecuteBuild an unsigned transaction to set take profit on an Adrena position. Returns transactionBase64 for local signing. SAP MCP execution guidance: Intent: hosted unsigned transac...
-
sap_adrena_build_swapExecuteBuild an unsigned transaction to swap tokens through an Adrena pool. Uses zero-slippage oracle pricing. Returns transactionBase64 for local signing. SAP MCP execution guidance:...
-
sap_adrena_build_trailing_stopExecuteBuild an unsigned transaction to set a trailing stop loss on an Adrena position. Reads the current oracle price and computes the stop loss at the specified percentage distance. ...
-
sap_adrena_simulate_positionExecuteFREE dry-run tool (no x402 charge): simulates opening a perp position on Adrena by building the same instructions as the open position builder, then calling connection.simulateT...
-
sap_open_vault_sessionExecuteOpen a vault session by 32-byte session hash. SAP MCP context: Memory/session flow. Store only intentionally encrypted payloads or public hashes; session and vault PDAs are visi...
-
sap_profile_switchExecuteSwitch the live SAP MCP runtime to another existing profile and reload client, signer, connection, and policy. SAP MCP execution guidance: Intent: SAP MCP tool workflow. Pricin...
-
sap_reactivate_agentExecuteReactivate the connected wallet SAP agent. SAP MCP context: Direct synapse-sap-sdk wrapper served by this MCP. Read tools return on-chain state; write tools require signer polic...
-
sap_session_startExecuteStart a high-level SDK session by session ID. SAP MCP context: Memory/session flow. Store only intentionally encrypted payloads or public hashes; session and vault PDAs are visi...
-
sap_sns_build_manage_record_transactionExecuteTemporarily unavailable. SAP MCP does not currently publish an SNS record write builder because the historical Bonfida SNS npm package is not installable from npmjs. The tool fa...
-
sap_sns_build_set_primary_domain_transactionExecuteTemporarily unavailable. Setting primary SNS domains is disabled in SAP MCP until the SNS write path is migrated to a current installable SDK and covered by end-to-end tests. S...
-
sap_strategy_executeExecuteFree local tool. Loads a saved strategy by category and name, resolves trading parameters, validates against trading policy, and returns either a dry-run simulation or a ready-t...
-
spl-token_deployTokenExecuteDeploy a new SPL token with Metaplex metadata. Returns the mint address and an unsigned transaction. SAP MCP context: Protocol spl-token; operation class write. Use for SPL toke...
-
spl-token_freezeAccountExecuteFreeze a token account (prevents all transfers). Requires freeze authority. SAP MCP context: Protocol spl-token; operation class write. Use for SPL token deploy, mint, transfer,...
-
spl-token_mintToExecuteMint additional tokens to a destination wallet (requires mint authority). SAP MCP context: Protocol spl-token; operation class write. Use for SPL token deploy, mint, transfer, b...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.