bnb_swap
Swap BEP-20 tokens on PancakeSwap V3 (requires private key)
This record as markdown: /tools/nirholas-agenti/bnb-swap.md
What bnb_swap does on Agenti
AI agents use bnb_swap to commit financial operations through Agenti, usually the final step of a payment, billing, or trading workflow. A call moves real money.
Why bnb_swap is rated Critical
This tool performs on-chain token swaps using a private key, directly committing financial transactions on a DEX. It moves real cryptocurrency assets, constitutes an irreversible financial operation, and misuse could drain funds. The server description explicitly states it enables agents to 'spend' and 'earn' cryptocurrency, confirming Financial category at critical severity.
From the tool's definition Swap BEP-20 tokens on PancakeSwap V3 (requires private key)
Attacks that exploit this kind of access
The rule that runs bnb_swap safely
PolicyLayer is an MCP gateway: it sits between your AI agents and Agenti, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For bnb_swap, this is the rule to start with:
Any call to bnb_swap is blocked until a human approves it. The rest of the server keeps working.
The button opens the PolicyLayer dashboard: create your workspace, connect Agenti, apply this rule, and every bnb_swap call is checked against it from then on.
Questions about bnb_swap
Swap BEP-20 tokens on PancakeSwap V3 (requires private key). It is categorised as a Financial tool in the Agenti MCP Server, which means it involves financial transactions. Block by default and require explicit approval.
Register the Agenti MCP server in PolicyLayer and add a rule for bnb_swap: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Agenti. Nothing to install.
bnb_swap is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.
Yes. Add a rate_limit block to the bnb_swap rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for bnb_swap. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
bnb_swap is provided by the Agenti MCP server (nirholas/agenti). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
More on Agenti, and thousands of servers like it.
Across the catalogue