{"uid":"cap_yQg4goOaEcqwy8KPgyQQR","slug":"mcp-operation-risk-evaluator-3eb16956","name":"MCP Operation Risk Evaluator","description":"Analyze operation-level risk inside consolidated MCP tools. Returns evidence-backed ALLOW, DENY, or REQUIRE_APPROVAL decisions, retry semantics, schema-drift status, and a deterministic operation effect ID. Designed for MCP tools whose command/action arguments expose operations with different risk levels.","url":"https://87-106-119-237.sslip.io/v1/mcp-operation-risk/evaluate?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"tool":{"type":"object","title":"NativeToolRecord","required":["name","description","inputSchema"],"properties":{"name":{"type":"string","title":"Name","description":"Exact tool name from the MCP server's tools/list response."},"_meta":{"anyOf":[{"type":"object","additionalProperties":true},{"type":"null"}],"title":"Meta","default":null,"description":"Relevant tool metadata from tools/list, when present."},"icons":{"anyOf":[{"type":"array","items":{"type":"object","additionalProperties":true}},{"type":"null"}],"title":"Icons","default":null,"description":"Tool icons from tools/list, when present."},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title","default":null,"description":"Tool title from tools/list, when provided by the server."},"execution":{"anyOf":[{"type":"object","additionalProperties":true},{"type":"null"}],"title":"Execution","default":null,"description":"Tool execution metadata from tools/list, when present."},"annotations":{"type":"object","title":"Annotations","description":"Tool annotations from tools/list, such as read-only or destructive hints; use an empty object when absent.","additionalProperties":true},"description":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Description","description":"Tool description from tools/list, or null if the server omitted it."},"inputSchema":{"type":"object","title":"Inputschema","description":"Complete inputSchema from tools/list; used to validate the intended arguments and match a supported tool manifest.","additionalProperties":true},"outputSchema":{"anyOf":[{"type":"object","additionalProperties":true},{"type":"null"}],"title":"Outputschema","default":null,"description":"Tool output schema from tools/list, when present."}},"description":"The complete relevant Tool record returned by the source server's tools/list.","additionalProperties":false},"source":{"type":"object","title":"NativeSource","required":["server","protocol_version"],"properties":{"server":{"type":"object","title":"NativeServerIdentity","required":["name","version"],"properties":{"name":{"type":"string","title":"Name","description":"Name reported by the MCP server during initialize; used as a supported-manifest lookup hint."},"version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Version","description":"Server version reported during initialize, or null when unavailable."}},"description":"MCP server identity from the connection's initialize response.","additionalProperties":false},"protocol_version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Protocol Version","description":"Negotiated MCP protocol version, or null when unavailable."}},"description":"MCP server and negotiated protocol identity for the source tool.","additionalProperties":false},"arguments":{"type":"object","title":"Arguments","description":"Arguments intended for the source MCP tools/call request being evaluated. The evaluator does not execute that call.","additionalProperties":true}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.0045","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.0045/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0045","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0045","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_X2ceZZhdLBpmT0Oj3KfGm","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.0045","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes risk of a named operation within an MCP tool and returns a deterministic ALLOW, DENY, or REQUIRE_APPROVAL decision with retry semantics and schema-drift detection.","exampleAgentPrompt":"Before running the 'delete_database' operation on the 'db-manager' tool from MCP server 'prod-mcp-01' (version 2.1.0), check its risk level and tell me whether you should auto-execute it, block it, or escalate for my approval — include the schema digest abc123...def456 from the latest tools/list.","exampleUseCases":[{"title":"Auto-approve safe MCP file reads","prompt":"Before my agent calls the 'read_file' operation on the 'filesystem' MCP tool from server 'local-mcp-v3' (version 1.0.0), evaluate its risk and confirm it's safe to run automatically without asking me first."},{"title":"Escalate dangerous shell execution","prompt":"The orchestrator is about to run 'exec_shell' on the 'system-tools' MCP tool from server 'infra-mcp-prod' version 3.2.1 — evaluate the risk and tell me if it needs my explicit approval before proceeding, and flag any schema drift you detect."},{"title":"Enforce approval gate in agent pipeline","prompt":"My agent pipeline uses the 'send_email' operation inside the 'comms-hub' MCP tool on server 'comms-mcp-01' version 0.9.4 — evaluate whether this should be allowed, denied, or held for review, and give me the deterministic effect ID so I can log it."}],"resultDescription":"Returns a structured risk decision (ALLOW, DENY, or REQUIRE_APPROVAL) backed by evidence, along with retry semantics indicating how the caller should handle failures, a schema-drift status comparing the provided schema digest against known good versions, and a deterministic operation effect ID derived from the input arguments hash for auditability.","failureModes":["Missing schema_digest causes the endpoint to default to REQUIRE_APPROVAL rather than a definitive decision","Unknown server_id or tool_name may result in insufficient evidence for a deterministic ruling","Malformed schema_digest (not a valid 64-char hex string) causes a validation error","Operation string exceeding 240 characters is rejected","Network or payment failure returns a 402 or 5xx error with no decision"],"whenToPreferThis":"Choose this endpoint when your agent orchestration layer needs a fast, deterministic, evidence-backed gate before executing MCP tool operations with varying risk profiles — especially when those tools expose commands ranging from read-only to destructive. It is particularly valuable when you need schema-drift detection to catch tool definition changes between deployments, and when you need a stable operation effect ID for audit logging. Prefer it over generic LLM-based risk reasoning when you need reproducible, hash-deterministic decisions that can be cached or compared across runs.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T06:34:33.979Z","isFirstParty":false,"canonicalSlug":"mcp-operation-risk-evaluator-3eb16956"}