High-risk tools in Sperax Ecosystem Crypto & DeFI MCP Server
63 of the 1318 tools in Sperax Ecosystem Crypto & DeFI MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
BinanceFuturesCountdownCancelAllExecuteSet auto-cancel all open orders after countdown. Use as dead man
-
cancel_transactionExecuteCancel a pending transaction by sending a 0-value transaction to yourself with the same nonce but higher gas
-
BinanceNewUserDataStreamExecuteCreate a new user data stream to receive account updates via WebSocket.
-
compile_tealExecuteCompile TEAL source code
-
deploy_contractExecuteDeploy a smart contract from bytecode and constructor arguments
-
deploy_create2ExecuteDeploy a contract using CREATE2 for deterministic addresses across chains
-
deploy_proxyExecuteDeploy a proxy contract (UUPS or TransparentUpgradeableProxy) pointing to an implementation
-
execute_multicallExecuteExecute multiple contract calls in a single transaction
-
execute_proposalExecuteExecute a queued proposal after timelock delay
-
execute_swapExecuteExecute a token swap on a DEX
-
gateway_execute_rpcExecuteExecute blockchain RPC calls through Tatum
-
plugins_executeExecuteExecute a plugin function through the SperaxOS gateway. Routes the request to the appropriate plugin API and returns the result.
-
wait_for_transactionExecuteWait for a transaction to be confirmed (mined). Polls the network until confirmation.
-
abi_encodeExecuteABI encode parameters (standard Solidity encoding)
-
api_ultrade_wallet_signinExecuteSign in to trading account
-
BinanceDeliveryChangeLeverageExecuteChange initial leverage for a COIN-M Futures symbol. ⚠️ Higher leverage = higher risk.
-
BinanceDeliveryChangePositionModeExecuteChange COIN-M Futures position mode between Hedge Mode and One-way Mode.
-
BinanceFuturesChangeLeverageExecuteChange initial leverage for a USD-M Futures symbol. ⚠️ Leverage changes affect your liquidation price and margin requirements.
-
BinanceFuturesChangeMultiAssetsModeExecuteChange Multi-Assets Mode setting. When enabled, margin from multiple assets (USDT, BUSD) can be used to avoid liquidation.
-
BinanceFuturesChangePositionModeExecuteChange position mode between Hedge Mode and One-way Mode. HEDGE: Can hold both LONG and SHORT positions simultaneously. ONE-WAY: Only one direction at a time (positionSide=BOTH).
-
BinancePortfolioMarginCmChangeLeverageExecuteChange leverage for a COIN-M Futures symbol in Portfolio Margin mode. ⚠️ Higher leverage increases risk.
-
BinancePortfolioMarginUmChangeLeverageExecuteChange leverage for a USDT-M Futures symbol in Portfolio Margin mode. ⚠️ Higher leverage increases risk.
-
BinanceWrapBethExecuteWrap BETH API allows users to convert BETH into WBETH, providing the wrapped WBETH amount and the exchange rate from BETH to WBETH.
-
call_api_endpointExecutecall an endpoint in the HIVE API. Note: use the category endpoints to get the list of endpoints and
-
encode_call_dataExecuteEncode function call data for use in multicall
-
encode_packedExecuteEncode values using Solidity
-
encode_uint64ExecuteEncode a uint64 to bytes
-
hash_messageExecuteHash a message using EIP-191 format
-
hash_typed_dataExecuteHash typed structured data according to EIP-712
-
queue_proposalExecuteQueue a successful proposal for execution (requires Timelock)
-
sign_bytesExecuteSign arbitrary bytes with a secret key
-
sign_messageExecuteSign a message using personal_sign (EIP-191)
-
sign_transactionExecuteSign a transaction with a secret key
-
sign_typed_dataExecuteSign typed data using EIP-712
-
simulate_bundleExecuteSimulate a bundle of transactions to check execution and returns
-
simulate_raw_transactionsExecuteSimulate raw transactions
-
simulate_transactionExecuteSimulate a transaction to check for potential issues before execution
-
simulate_transactionsExecuteSimulate transactions with detailed configuration
-
speed_up_transactionExecuteSpeed up a pending transaction by resubmitting it with higher gas price. Only works for pending transactions.
-
stake_lp_tokensExecuteStake LP tokens in a MasterChef-style farming contract
-
stake_tokensExecuteStake tokens in a staking contract
-
unwrap_native_tokenExecuteUnwrap wrapped tokens back to native tokens (WETH→ETH, WBNB→BNB, WMATIC→MATIC, etc.)
-
upgrade_proxyExecuteUpgrade a proxy contract to a new implementation address
-
verify_contractExecuteSubmit contract source code for verification on block explorers (Etherscan, Basescan, etc.)
-
wrap_native_tokenExecuteWrap native tokens to their wrapped ERC-20 version (ETH→WETH, BNB→WBNB, MATIC→WMATIC, etc.)
-
wrap_stethExecuteWrap stETH to wstETH (non-rebasing wrapped staked ETH)
-
add_liquidity_nativeExecuteAdd liquidity with native token (ETH, BNB, MATIC) and another token
-
binance_us_create_listen_keyExecuteCreate a new listen key for User Data Stream WebSocket connection. The listen key is used to subscribe to real-time account updates via WebSocket. Connect to: ${BINANCE_US_CONF...
-
BinanceDeliveryChangeMarginTypeExecuteChange margin type between ISOLATED and CROSSED for COIN-M Futures.
-
BinanceDeliveryCreateListenKeyExecuteCreate a new COIN-M Futures user data stream listen key. The listen key is valid for 60 minutes and can be used to receive account updates via WebSocket.
-
BinanceFuturesChangeMarginTypeExecuteChange margin type between ISOLATED and CROSSED for a USD-M Futures symbol. ⚠️ Cannot change if you have existing positions or open orders.
-
BinanceFuturesCloseListenKeyExecuteClose a USD-M Futures user data stream listen key. This invalidates the listen key and closes the associated WebSocket stream.
-
BinanceFuturesCreateListenKeyExecuteCreate a new USD-M Futures user data stream listen key. The listen key is valid for 60 minutes and can be used to receive account updates via WebSocket. Must be kept alive with ...
-
cast_voteExecuteCast a vote on a governance proposal
-
create_permit_signatureExecuteCreate an EIP-2612 permit signature for gasless token approvals
-
make_app_call_txnExecuteCreate an application call transaction
-
make_app_closeout_txnExecuteCreate an application close out transaction
-
make_app_create_txnExecuteCreate an application creation transaction
-
make_app_update_txnExecuteCreate an application update transaction
-
make_keyreg_txnExecuteCreate a key registration transaction
-
send_private_transactionExecuteSend a transaction via Flashbots Protect RPC to avoid MEV extraction (frontrunning, sandwich attacks)
-
send_raw_transactionExecuteSubmit signed transactions to the Algorand network
-
write_contractExecuteWrite data to a smart contract by calling a state-changing function
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.