78trust / 100
Mcp Operation Risk Evaluate
by MCP Operation Risk in Security & trust
x402 APIPassing, checked 1 h ago
Analyze operation-level risk inside consolidated MCP tools. Returns evidence-backed ALLOW, DENY, or REQUIRE_APPROVAL decisions, retry semantics, schema-drift status, and a deterministic operation effect ID. Designed for MCP tools whose command/action arguments expose operations with different risk levels.
POST https://87-106-119-237.sslip.io/v1/mcp-operation-risk/evaluate
Last 30 days
All checks passedSome failedAll failedNot checked
- Uptime
- 100%
- Response time
- 152 ms typical, 320 ms slowest 5%
- Last check
- 1 h ago
- Next check
- any minute now
How to call it
# See the payment challenge (nothing is charged)
curl -i -X POST "https://87-106-119-237.sslip.io/v1/mcp-operation-risk/evaluate" \
-H "content-type: application/json" \
-d '{"arguments":{"command":"resilience_drill_create","intent":"Review the risk of this intended call; do not execute it.","learn":false,"parameters":{}},"source":{"protocol_version":"2025-11-25","server":{"name":"Azure MCP Server","version":"3.0.0-beta.49"}},"tool":{"annotations":{"destructiveHint":true,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":false,"title":"create_azure_resilience_management_resources"},"description":"Create, update, or delete Azure Resilience Management resources, including usage plans, usage plan enrollments, drills, drill resources and runs, and recovery plans for Azure service groups.\n\nThis tool is a hierarchical MCP command router.\nTo invoke a command, set \"command\" and wrap its args in \"parameters\".\nSet \"learn=true\" to discover available sub commands.","inputSchema":{"additionalProperties":false,"properties":{"command":{"description":"The command to execute against the specified tool.","type":"string"},"intent":{"description":"The intent of the operation to perform.","type":"string"},"learn":{"default":false,"description":"To learn about the tool and its supported child tools and parameters.","type":"boolean"},"parameters":{"description":"The parameters to pass to the tool command.","type":"object"}},"required":["intent"],"type":"object"},"name":"create_azure_resilience_management_resources"}}'import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
const client = new x402Client().register(
"eip155:8453",
new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);
// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2F87-106-119-237.sslip.io%2Fv1%2Fmcp-operation-risk%2Fevaluate
const res = await pay("https://87-106-119-237.sslip.io/v1/mcp-operation-risk/evaluate", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({"arguments":{"command":"resilience_drill_create","intent":"Review the risk of this intended call; do not execute it.","learn":false,"parameters":{}},"source":{"protocol_version":"2025-11-25","server":{"name":"Azure MCP Server","version":"3.0.0-beta.49"}},"tool":{"annotations":{"destructiveHint":true,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":false,"title":"create_azure_resilience_management_resources"},"description":"Create, update, or delete Azure Resilience Management resources, including usage plans, usage plan enrollments, drills, drill resources and runs, and recovery plans for Azure service groups.\n\nThis tool is a hierarchical MCP command router.\nTo invoke a command, set \"command\" and wrap its args in \"parameters\".\nSet \"learn=true\" to discover available sub commands.","inputSchema":{"additionalProperties":false,"properties":{"command":{"description":"The command to execute against the specified tool.","type":"string"},"intent":{"description":"The intent of the operation to perform.","type":"string"},"learn":{"default":false,"description":"To learn about the tool and its supported child tools and parameters.","type":"boolean"},"parameters":{"description":"The parameters to pass to the tool command.","type":"object"}},"required":["intent"],"type":"object"},"name":"create_azure_resilience_management_resources"}}),
});
console.log(await res.json());Example input
{
"arguments": {
"command": "resilience_drill_create",
"intent": "Review the risk of this intended call; do not execute it.",
"learn": false,
"parameters": {}
},
"source": {
"protocol_version": "2025-11-25",
"server": {
"name": "Azure MCP Server",
"version": "3.0.0-beta.49"
}
},
"tool": {
"annotations": {
"destructiveHint": true,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": false,
"title": "create_azure_resilience_management_resources"
},
"description": "Create, update, or delete Azure Resilience Management resources, including usage plans, usage plan enrollments, drills, drill resources and runs, and recovery plans for Azure service groups.\n\nThis tool is a hierarchical MCP command router.\nTo invoke a command, set \"command\" and wrap its args in \"parameters\".\nSet \"learn=true\" to discover available sub commands.",
"inputSchema": {
"additionalProperties": false,
"properties": {
"command": {
"description": "The command to execute against the specified tool.",
"type": "string"
},
"intent": {
"description": "The intent of the operation to perform.",
"type": "string"
},
"learn": {
"default": false,
"description": "To learn about the tool and its supported child tools and parameters.",
"type": "boolean"
},
"parameters": {
"description": "The parameters to pass to the tool command.",
"type": "object"
}
},
"required": [
"intent"
],
"type": "object"
},
"name": "create_azure_resilience_management_resources"
}
}Example output
{
"approval_required": false,
"authority_decision": "ALLOW",
"decision": "ALLOW",
"derived": {
"manifest": "Azure MCP [email protected]",
"operation": "resilience_drill_create",
"schema_digest": "73720809cb18dc1bb5b45746cf170f81c4cf35e1958f1e44a4c27e14023a06a5"
},
"effect_class": "ADDITIVE_WRITE",
"evidence": [
"https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/src/Resources/consolidated-tools.json",
"https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/docs/new-command.md"
],
"manifest_version": "3.0.0-beta.49",
"operation_effect_id": "msop_738bcfc25ed96259d25ae73da3ac4d3b3d4bda80845438d202d55e89f6d39e4b",
"reason_codes": [
"MANIFEST_MATCH"
],
"retry_semantics": "RETRY_POLICY_RESOLVED_IDEMPOTENT",
"schema_status": "MATCH",
"supported": true
}Security scan
- No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time | Price |
|---|---|---|---|---|
| 1 h ago | Passed | 402 | 420 ms | $0.0045 |
| 5 h ago | Passed | 402 | 110 ms | $0.0045 |
| 8 h ago | Passed | 402 | 123 ms | $0.0045 |
| 12 h ago | Passed | 402 | 169 ms | $0.0045 |
| 15 h ago | Passed | 402 | 167 ms | $0.0045 |
| 19 h ago | Passed | 402 | 320 ms | $0.0045 |
| 22 h ago | Passed | 402 | 141 ms | $0.0045 |
| 26 h ago | Passed | 402 | 111 ms | $0.0045 |
| 30 h ago | Passed | 402 | 152 ms | $0.0045 |
| 33 h ago | Passed | 402 | 151 ms | $0.0045 |
| 39 h ago | Passed | 402 | 156 ms | $0.0045 |