{"uid":"cap_v8IqgDnannFt2NmFrcQIs","slug":"nomos-mcp-server-risk-check-129cc1a6","name":"Nomos MCP Server Risk Check","description":"Machine-payable service intelligence for discovering, verifying, and monitoring identity, risk, authorization, execution-preflight, and evidence APIs before autonomous agents spend.","url":"https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/agent/mcp-server-risk-check","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":[],"properties":{"auth":{"enum":["none","api_key","bearer","oauth","mTLS","unknown"],"type":"string","description":"Authentication mode exposed by the MCP server."},"tools":{"type":"string","maxLength":2000,"description":"Comma-separated MCP tool names when a manifest URL is unavailable."},"transport":{"enum":["stdio","http","sse","websocket","unknown"],"type":"string","description":"MCP transport mode."},"server_url":{"type":"string","pattern":"^https?://","maxLength":2048,"description":"Public MCP server, manifest, or connector URL."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"network":{"type":"string"},"product":{"type":"string"},"activity":{"type":"object"},"identity":{"type":"object"},"assessment":{"type":"object"},"provenance":{"type":"object"}}}}}}},"responseSchema":{"type":"json","example":{"network":"eip155:8453","product":"mcp-server-risk-check","assessment":{"flags":[],"risk_level":"low","risk_score":0}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_NmghCHM3jS8U_ybI0cZhU","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a risk assessment on a given MCP server URL, returning a risk score, risk level, and any flags indicating suspicious or dangerous behavior.","exampleAgentPrompt":"Before connecting to that MCP server at https://myserver.example.com, run a risk check on it — it uses HTTP transport and no authentication — and tell me if it's safe to use.","exampleUseCases":[{"title":"Preflight check before agent tool use","prompt":"Before my agent connects to https://tools.acme.com/mcp and starts calling its tools, run a risk assessment on it — it uses SSE transport and bearer auth — and tell me the risk level and any flags."},{"title":"Screening unknown community MCP server","prompt":"I found a public MCP server at https://community-mcp.dev/server that exposes tools called 'execute_shell,read_file,write_file' over stdio with no auth — can you risk-check it before I let my agent use it?"},{"title":"Agent safety gate in automated workflow","prompt":"My workflow is about to connect to https://partner-agent.io/mcp which uses HTTP transport and API key auth — check its risk score first and only proceed if the risk level comes back as low."}],"resultDescription":"Returns a JSON object containing the network identifier (e.g. eip155:8453), the product name ('mcp-server-risk-check'), and an assessment object with a numeric risk_score (0–100), a risk_level string (e.g. 'low', 'medium', 'high'), and a flags array listing any specific risk signals detected. May also include identity, activity, and provenance objects with additional context.","failureModes":["Invalid or unreachable server_url returns an error or degraded assessment","Missing required 'server_url' query parameter results in a validation error","Unknown or unsupported transport/auth enum values may yield incomplete scoring","Payment not received (x402 flow incomplete) results in 402 Payment Required response","Rate limiting or worker timeout for slow-responding MCP servers"],"whenToPreferThis":"Use this endpoint when an AI agent needs to perform a security preflight check on an MCP server before connecting to or executing tools from it. Prefer this over generic URL scanners when you need MCP-specific risk signals (transport mode, auth mode, exposed tools) returned in a structured agent-readable format with a numeric risk score and actionable flags.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T12:32:03.731Z","isFirstParty":false}