whitelist_wallets

What whitelist_wallets does on Basis MCP Server

AI agents use whitelist_wallets to create or update resources in Basis MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Basis MCP Server environment.

Why whitelist_wallets is rated Medium

This tool modifies token whitelisting rules, which changes who can interact with a frozen token. While not destructive (the change can be undone) or directly moving funds, it is a write operation that alters the state and permissions of blockchain assets. The severity is high because misconfiguration could lock legitimate users out of their assets or grant unintended access, creating financial harm.

From the tool's definition Tool name 'whitelist_wallets' and description 'Add wallets to frozen token' indicate modification of token access control lists. The action is reversible (wallets can be removed from whitelists) but affects financial permissions on blockchain assets.

The rule that runs whitelist_wallets safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Basis MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For whitelist_wallets, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "whitelist_wallets": {
      "limits": [
        {
          "counter": "whitelist_wallets_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about whitelist_wallets