Critical Risk →

opt_in_rewards

Opt into rewards for a TIP-20 token. After opting in, you will earn rewards

How to control opt_in_rewards ↓

What opt_in_rewards does on Tempo

AI agents use opt_in_rewards to commit financial operations through Tempo — usually the final step of a payment, billing, or trading workflow. A call moves real money.

Critical Risk

Why opt_in_rewards needs a policy

This tool commits a financial action by enrolling an account into a rewards program on a blockchain stablecoin payment system. Opting into rewards creates an on-chain obligation/entitlement with financial implications. Given the server context of autonomous real-world payments and financial token operations, this constitutes a Financial category action.

From the tool's definition Opt into rewards for a TIP-20 token. After opting in, you will earn rewards

Documented attack patterns abuse exactly the kind of access opt_in_rewards gives an agent:

How to control opt_in_rewards

PolicyLayer is an MCP gateway — it sits between your AI agents and Tempo, and nothing reaches the server without passing your rules. This is the rule we recommend for opt_in_rewards:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "opt_in_rewards": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

Any call to opt_in_rewards is blocked until a human approves it. The rest of the server keeps working.

  1. Create a free account and register Tempo — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
GATE THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about opt_in_rewards

What does the opt_in_rewards tool do? +

Opt into rewards for a TIP-20 token. After opting in, you will earn rewards. It is categorised as a Financial tool in the Tempo MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on opt_in_rewards? +

Register the Tempo MCP server in PolicyLayer and add a rule for opt_in_rewards: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Tempo. Nothing to install.

What risk level is opt_in_rewards? +

opt_in_rewards is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit opt_in_rewards? +

Yes. Add a rate_limit block to the opt_in_rewards rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block opt_in_rewards completely? +

Set action: deny in the PolicyLayer policy for opt_in_rewards. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides opt_in_rewards? +

opt_in_rewards is provided by the Tempo MCP server (arome3/tempo-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Tempo tool call.

Start from Tempo, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

61 Tempo tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.