High-risk tools in PortalMCP

High severity PortalMCP MCP Server 5 of 17 tools

5 of the 17 tools in PortalMCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

eth_compile_contract Execute

Compile Solidity contract code to bytecode and ABI
eth_create_staking_contract Execute

Generate and prepare a staking contract for deployment
eth_deploy_contract Execute

Prepare a transaction to deploy a compiled contract
eth_deploy_contract_with_signer Execute

Deploy a contract using the configured private key (signer)
eth_mint_nft Execute

Prepare a transaction to mint an NFT. Picks mint() / safeMint() / mintWithURI() based on provided parameters.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in PortalMCP

Tools at high risk

Attacks that target this class

More on PortalMCP

Enforce policy on every PortalMCP tool call.