Swap tokens on Ethereum, Optimism, Arbitrum, or Base via the 0x/Matcha aggregator. Automatically handles ERC20 approval if needed. Checks balance before swapping.
AI agents use intent0xSwap to commit financial operations through Agentek Eth — usually the final step of a payment, billing, or trading workflow. A call moves real money.
This tool executes token swaps across multiple blockchain networks, which constitutes a financial transaction moving cryptocurrency assets between parties. It also handles ERC20 approvals automatically, granting spending permissions on-chain. Misuse could result in irreversible financial losses through unauthorized token swaps or malicious approval grants.
From the tool's definition Swap tokens on Ethereum, Optimism, Arbitrum, or Base via the 0x/Matcha aggregator. Automatically handles ERC20 approval if needed.
Documented attack patterns abuse exactly the kind of access intent0xSwap gives an agent:
PolicyLayer is an MCP gateway — it sits between your AI agents and Agentek Eth, and nothing reaches the server without passing your rules. This is the rule we recommend for intent0xSwap:
{
"version": "1",
"default": "deny",
"tools": {
"intent0xSwap": {
"deny_if": [
{
"conditions": [],
"on_deny": "Requires human approval."
}
]
}
}
} Any call to intent0xSwap is blocked until a human approves it. The rest of the server keeps working.
Free to start. No card required.
Swap tokens on Ethereum, Optimism, Arbitrum, or Base via the 0x/Matcha aggregator. Automatically handles ERC20 approval if needed. Checks balance before swapping. It is categorised as a Financial tool in the Agentek Eth MCP Server, which means it involves financial transactions. Block by default and require explicit approval.
Register the Agentek Eth MCP server in PolicyLayer and add a rule for intent0xSwap: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Agentek Eth. Nothing to install.
intent0xSwap is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.
Yes. Add a rate_limit block to the intent0xSwap rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for intent0xSwap. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
intent0xSwap is provided by the Agentek Eth MCP server (nanidao/agentek). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Start from Agentek Eth, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.
Free to start. No card required.
165 Agentek Eth tools catalogued and risk-classified — across an index of 43,000+ MCP servers.