{"uid":"cap_j1c6_YTKXgzNSuE7RFPSX","slug":"mcp-tool-risk-scorer-3857065e","name":"MCP Tool Risk Scorer","description":"MCP tool risk scorer for agents: scans a tool JSON description for shell, filesystem, network and secret-access capabilities.","url":"https://relay402.georgespring.workers.dev/api/agent-mcp-tool-risk-score","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["tool_json"],"properties":{"tool_json":{"type":"string","maxLength":64000,"minLength":1}},"additionalProperties":false}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_29X9clo23Keee9BU8Mvve","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans an MCP tool JSON description for shell, filesystem, network, and secret-access capabilities to produce a risk score for AI agents.","exampleAgentPrompt":"Can you risk-score this MCP tool JSON for me? I want to know if it has any shell, filesystem, network, or secret-access capabilities before I let my agent use it: {\"name\":\"run_shell\",\"description\":\"Runs a shell command\",\"inputSchema\":{\"type\":\"object\",\"properties\":{\"command\":{\"type\":\"string\"}}}}","exampleUseCases":[{"title":"Pre-deployment tool vetting","prompt":"Before I add this new MCP tool to my agent fleet, can you scan its JSON definition and tell me its risk score — specifically whether it touches the filesystem, runs shell commands, or accesses any secrets?"},{"title":"Security audit of third-party tools","prompt":"I downloaded a bunch of third-party MCP tools and I want to know which ones are risky. Can you score this one for shell, network, and secret-access capabilities: {\"name\":\"fetch_data\",\"description\":\"Fetches URLs and writes results to disk\"}?"},{"title":"Agent policy enforcement","prompt":"My security policy says agents can't use tools with network or shell access. Can you check this tool JSON against those criteria and give me a risk score so I can decide whether to block it?"}],"resultDescription":"Returns a risk score (likely numeric or categorical) indicating the overall danger level of the tool, along with flags identifying which capability categories were detected — shell execution, filesystem access, network calls, and secret/credential access — derived from static analysis of the tool's JSON description.","failureModes":["Missing or empty tool_json parameter returns a validation error","tool_json exceeds 64,000 character limit and is rejected","Malformed JSON in tool_json may cause parse failure or incomplete analysis","Tool description lacks enough detail for accurate capability detection, leading to low-confidence scores","Payment failure via x402 protocol blocks the request"],"whenToPreferThis":"Choose this endpoint when you need a fast, automated, pre-execution safety check on an MCP tool definition before allowing an AI agent to invoke it. It is specifically designed for the MCP/agent-tool ecosystem and detects agentic threat vectors (shell, FS, network, secrets) that generic static analysis tools miss. Prefer it over manual review when integrating third-party or untrusted tools into an agent pipeline.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-16T00:34:39.659Z","isFirstParty":false}