Tool Risk Model

What agents can and cannot do with Stackit.ai tools.

Agent tools are separated by risk level. Reads and simulations are safe to test publicly. Preparing an action is not the same thing as moving funds. Real execution requires signed or user-approved authority.

Last updated June 25, 2026

Risk levels

Read-only

Reads public or authorized state. Cannot create unsigned transactions or move funds.

Examples

market rates, gateway status, portfolio state, policy state

Simulation

Calculates expected fees, LTV, health score, and safety result. Cannot move funds.

Examples

preview_action, estimates, safety-rail tests

Transaction-prep

Creates unsigned transaction envelopes or sandbox treasuries. Requires wallet signature before real execution.

Examples

create_treasury, wallet-mode action prep

Live-action

Relays an already signed transaction or executes inside approved automation permissions.

Examples

relay_signed_transaction, managed live automation

Security controls

Scoped permissionsNo unlimited agent execution. Permissions bind action type, asset, LTV limits, gas caps, and approval mode.
Human approval modeDefault for real money. A wallet signature or approved automation policy is required.
Read-only sandboxPublic reads and simulations are available without signup.
Transaction preparationAllowed before execution. A prepared action is not a completed action.
Execution controlsLive execution requires approved wallet permissions, idempotency, and policy validation.
LoggingEvery agent/tool action should be logged with initiator, action, trigger, amount, fee, and timestamp.
Rate limitsPublic and state-changing routes use rate limits to reduce abuse.
Replay protectionState-changing routes require Idempotency-Key headers where applicable.
PII filteringDo not pass personal contact, payment, or credential data through prompts unless required and explicitly approved.
Prompt injectionDo not feed untrusted tool output into execution prompts without validating policy, amount, recipient, chain, and permission state.

Non-negotiable rule

Agents may analyze, simulate, recommend, monitor, and prepare treasury actions. Agents should not move real funds unless the user has explicitly granted approved, scoped permissions or signed the transaction.