Create and mint new NFTs
AI agents use MINT_NFT to commit financial operations through Solana MCP Server — usually the final step of a payment, billing, or trading workflow. A call moves real money.
Minting NFTs is a financial operation: it irreversibly commits SOL for transaction fees and creates on-chain assets with real monetary value. The operation cannot be undone once executed on the blockchain. Given the financial context of the server (which also includes TRADE, TRANSFER, and DEPLOY_TOKEN tools), misuse could result in unauthorized spending of funds and creation of assets.
From the tool's definition "Create and mint new NFTs" — minting NFTs on Solana involves spending SOL (gas fees) and potentially committing financial resources to deploy on-chain assets
Attacks that exploit this kind of access
Create and mint new NFTs. It is categorised as a Financial tool in the Solana MCP Server MCP Server, which means it involves financial transactions. Block by default and require explicit approval.
Register the Solana MCP Server MCP server in PolicyLayer and add a rule for MINT_NFT: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Solana MCP Server. Nothing to install.
MINT_NFT is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.
Yes. Add a rate_limit block to the MINT_NFT rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for MINT_NFT. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
MINT_NFT is provided by the Solana MCP Server MCP server (pingaifun/ping-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
MINT_NFT is one line of Solana MCP Server's registry record.
The record carries the whole server: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.
Teams ship this data inside their own products. See what a licence covers →