Critical Risk →

transfer_ens_name

Transfer ownership of an ENS name to another wallet address. Automatically detects whether the name is wrapped (NameWrapper/ERC-1155) or unwrapped (BaseRegistrar/ERC-721) and builds the correct transaction. Requirements: - The fromAddress must currently own the name - Both addresses must be val...

Part of the Name Whisper MCP server. Enforce policies on this tool with Intercept, the open-source MCP proxy.

namewhisper/ens-tools Financial Risk 5/5

AI agents use transfer_ens_name to initiate financial transactions through Name Whisper. Financial operations involve real money and are irreversible once processed. Intercept blocks financial tools by default, requiring explicit human approval with transaction-level limits to prevent unauthorised spending.

transfer_ens_name moves real money. Without a policy, an autonomous agent could initiate transactions that drain accounts or exceed budgets. Intercept blocks financial tools by default, requiring human-in-the-loop approval with configurable spending limits per transaction and per time window.

Financial tools involve real money. Block by default and require explicit human approval before enabling.

namewhisper-ens-tools.yaml
tools:
  transfer_ens_name:
    rules:
      - action: deny
        reason: "Requires human approval"

See the full Name Whisper policy for all 34 tools.

Tool Name transfer_ens_name
Category Financial
Risk Level Critical

View all 34 tools →

Agents calling financial-class tools like transfer_ens_name have been implicated in these attack patterns. Read the full case and prevention policy for each:

Browse the full MCP Attack Database →

Other tools in the Financial risk category across the catalogue. The same policy patterns (deny, require_approval) apply to each.

transfer_ens_name is one of the critical-risk operations in Name Whisper. For the full severity-focused view — only the critical-risk tools with their recommended policies — see the breakdown for this server, or browse all critical-risk tools across every MCP server.

What does the transfer_ens_name tool do? +

Transfer ownership of an ENS name to another wallet address. Automatically detects whether the name is wrapped (NameWrapper/ERC-1155) or unwrapped (BaseRegistrar/ERC-721) and builds the correct transaction. Requirements: - The fromAddress must currently own the name - Both addresses must be valid Ethereum addresses - The name must be registered (not expired) WARNING: This transfers FULL ownership. The recipient gains complete control including the ability to transfer, set records, or let the name expire. Resolver records (avatar, addresses, etc.) are NOT affected by transfer — they stay on the name.. It is categorised as a Financial tool in the Name Whisper MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on transfer_ens_name? +

Add a rule in your Intercept YAML policy under the tools section for transfer_ens_name. You can allow, deny, rate-limit, or validate arguments. Then run Intercept as a proxy in front of the Name Whisper MCP server.

What risk level is transfer_ens_name? +

transfer_ens_name is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit transfer_ens_name? +

Yes. Add a rate_limit block to the transfer_ens_name rule in your Intercept policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block transfer_ens_name completely? +

Set action: deny in the Intercept policy for transfer_ens_name. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides transfer_ens_name? +

transfer_ens_name is provided by the Name Whisper MCP server (namewhisper/ens-tools). Intercept sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policies on Name Whisper

Open source. One binary. Zero dependencies.

npx -y @policylayer/intercept
github.com/policylayer/intercept →
// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.