Medium Risk

wallet_import

Import a wallet from seed phrase or keystore JSON. Args: source: Either a BIP39 seed phrase (12-24 words) or encrypted keystore JSON string from wallet_export wallet_id: Desired wallet ID (optional, auto-generated if not provided) password: Password for encrypted keystore or seed phrase Returns i...

How to control wallet_import ↓

AI agents use wallet_import to create or update resources in RustChain + BoTTube MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your RustChain + BoTTube MCP Server environment.

Medium Risk

The tool creates or modifies wallet data within the blockchain system by importing wallet credentials. While it doesn't directly move funds (which would be Financial), it establishes persistent wallet access that enables subsequent financial operations.

From the tool's definition Tool description states 'Import a wallet from seed phrase or keystore JSON' and 'Returns imported wallet info (wallet_id, address)'. This creates new wallet access by importing credentials from external sources.

Documented attack patterns abuse exactly the kind of access wallet_import gives an agent:

PolicyLayer is an MCP gateway — it sits between your AI agents and RustChain + BoTTube MCP Server, and nothing reaches the server without passing your rules. This is the rule we recommend for wallet_import:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "wallet_import": {
      "limits": [
        {
          "counter": "wallet_import_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

wallet_import stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register RustChain + BoTTube MCP Server — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Go deeper

What does the wallet_import tool do? +

Import a wallet from seed phrase or keystore JSON. Args: source: Either a BIP39 seed phrase (12-24 words) or encrypted keystore JSON string from wallet_export wallet_id: Desired wallet ID (optional, auto-generated if not provided) password: Password for encrypted keystore or seed phrase Returns imported wallet info (wallet_id, address). It is categorised as a Write tool in the RustChain + BoTTube MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on wallet_import? +

Register the RustChain + BoTTube MCP Server MCP server in PolicyLayer and add a rule for wallet_import: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches RustChain + BoTTube MCP Server. Nothing to install.

What risk level is wallet_import? +

wallet_import is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit wallet_import? +

Yes. Add a rate_limit block to the wallet_import rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block wallet_import completely? +

Set action: deny in the PolicyLayer policy for wallet_import. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides wallet_import? +

wallet_import is provided by the RustChain + BoTTube MCP Server MCP server (scottcjn/rustchain-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every RustChain + BoTTube MCP Server tool call.

Deterministic rules across all 39 RustChain + BoTTube MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Free to start. No card required.

39 RustChain + BoTTube MCP Server tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.