solana_get_wallet_address

What solana_get_wallet_address does on Agenti

AI agents call solana_get_wallet_address to retrieve information from Agenti without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why solana_get_wallet_address is rated Low

This is fundamentally a Read operation—it retrieves data without side effects. However, severity is elevated to 'high' rather than 'low' because the retrieved data (wallet address linked to a private key) can enable an attacker to track and potentially drain cryptocurrency holdings. The server's financial capabilities amplify the blast radius.

From the tool's definition Tool name and description indicate it 'Get[s] the Solana wallet address' — a retrieval operation with no modification. However, the wallet address is derived from AGENTI_SOLANA_PRIVATE_KEY, a highly sensitive cryptographic secret.

The rule that runs solana_get_wallet_address safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Agenti, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For solana_get_wallet_address, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "solana_get_wallet_address": {}
  }
}

Questions about solana_get_wallet_address