78trust / 100

Mcp Operation Risk Evaluate

by MCP Operation Risk in Security & trust

x402 APIPassing, checked 1 h ago

Analyze operation-level risk inside consolidated MCP tools. Returns evidence-backed ALLOW, DENY, or REQUIRE_APPROVAL decisions, retry semantics, schema-drift status, and a deterministic operation effect ID. Designed for MCP tools whose command/action arguments expose operations with different risk levels.

POST https://87-106-119-237.sslip.io/v1/mcp-operation-risk/evaluate

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
152 ms typical, 320 ms slowest 5%
Last check
1 h ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X POST "https://87-106-119-237.sslip.io/v1/mcp-operation-risk/evaluate" \
  -H "content-type: application/json" \
  -d '{"arguments":{"command":"resilience_drill_create","intent":"Review the risk of this intended call; do not execute it.","learn":false,"parameters":{}},"source":{"protocol_version":"2025-11-25","server":{"name":"Azure MCP Server","version":"3.0.0-beta.49"}},"tool":{"annotations":{"destructiveHint":true,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":false,"title":"create_azure_resilience_management_resources"},"description":"Create, update, or delete Azure Resilience Management resources, including usage plans, usage plan enrollments, drills, drill resources and runs, and recovery plans for Azure service groups.\n\nThis tool is a hierarchical MCP command router.\nTo invoke a command, set \"command\" and wrap its args in \"parameters\".\nSet \"learn=true\" to discover available sub commands.","inputSchema":{"additionalProperties":false,"properties":{"command":{"description":"The command to execute against the specified tool.","type":"string"},"intent":{"description":"The intent of the operation to perform.","type":"string"},"learn":{"default":false,"description":"To learn about the tool and its supported child tools and parameters.","type":"boolean"},"parameters":{"description":"The parameters to pass to the tool command.","type":"object"}},"required":["intent"],"type":"object"},"name":"create_azure_resilience_management_resources"}}'
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2F87-106-119-237.sslip.io%2Fv1%2Fmcp-operation-risk%2Fevaluate
const res = await pay("https://87-106-119-237.sslip.io/v1/mcp-operation-risk/evaluate", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({"arguments":{"command":"resilience_drill_create","intent":"Review the risk of this intended call; do not execute it.","learn":false,"parameters":{}},"source":{"protocol_version":"2025-11-25","server":{"name":"Azure MCP Server","version":"3.0.0-beta.49"}},"tool":{"annotations":{"destructiveHint":true,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":false,"title":"create_azure_resilience_management_resources"},"description":"Create, update, or delete Azure Resilience Management resources, including usage plans, usage plan enrollments, drills, drill resources and runs, and recovery plans for Azure service groups.\n\nThis tool is a hierarchical MCP command router.\nTo invoke a command, set \"command\" and wrap its args in \"parameters\".\nSet \"learn=true\" to discover available sub commands.","inputSchema":{"additionalProperties":false,"properties":{"command":{"description":"The command to execute against the specified tool.","type":"string"},"intent":{"description":"The intent of the operation to perform.","type":"string"},"learn":{"default":false,"description":"To learn about the tool and its supported child tools and parameters.","type":"boolean"},"parameters":{"description":"The parameters to pass to the tool command.","type":"object"}},"required":["intent"],"type":"object"},"name":"create_azure_resilience_management_resources"}}),
});
console.log(await res.json());

Example input

{
  "arguments": {
    "command": "resilience_drill_create",
    "intent": "Review the risk of this intended call; do not execute it.",
    "learn": false,
    "parameters": {}
  },
  "source": {
    "protocol_version": "2025-11-25",
    "server": {
      "name": "Azure MCP Server",
      "version": "3.0.0-beta.49"
    }
  },
  "tool": {
    "annotations": {
      "destructiveHint": true,
      "idempotentHint": true,
      "openWorldHint": false,
      "readOnlyHint": false,
      "title": "create_azure_resilience_management_resources"
    },
    "description": "Create, update, or delete Azure Resilience Management resources, including usage plans, usage plan enrollments, drills, drill resources and runs, and recovery plans for Azure service groups.\n\nThis tool is a hierarchical MCP command router.\nTo invoke a command, set \"command\" and wrap its args in \"parameters\".\nSet \"learn=true\" to discover available sub commands.",
    "inputSchema": {
      "additionalProperties": false,
      "properties": {
        "command": {
          "description": "The command to execute against the specified tool.",
          "type": "string"
        },
        "intent": {
          "description": "The intent of the operation to perform.",
          "type": "string"
        },
        "learn": {
          "default": false,
          "description": "To learn about the tool and its supported child tools and parameters.",
          "type": "boolean"
        },
        "parameters": {
          "description": "The parameters to pass to the tool command.",
          "type": "object"
        }
      },
      "required": [
        "intent"
      ],
      "type": "object"
    },
    "name": "create_azure_resilience_management_resources"
  }
}

Example output

{
  "approval_required": false,
  "authority_decision": "ALLOW",
  "decision": "ALLOW",
  "derived": {
    "manifest": "Azure MCP [email protected]",
    "operation": "resilience_drill_create",
    "schema_digest": "73720809cb18dc1bb5b45746cf170f81c4cf35e1958f1e44a4c27e14023a06a5"
  },
  "effect_class": "ADDITIVE_WRITE",
  "evidence": [
    "https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/src/Resources/consolidated-tools.json",
    "https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/docs/new-command.md"
  ],
  "manifest_version": "3.0.0-beta.49",
  "operation_effect_id": "msop_738bcfc25ed96259d25ae73da3ac4d3b3d4bda80845438d202d55e89f6d39e4b",
  "reason_codes": [
    "MANIFEST_MATCH"
  ],
  "retry_semantics": "RETRY_POLICY_RESOLVED_IDEMPOTENT",
  "schema_status": "MATCH",
  "supported": true
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
1 h agoPassed402420 ms$0.0045
5 h agoPassed402110 ms$0.0045
8 h agoPassed402123 ms$0.0045
12 h agoPassed402169 ms$0.0045
15 h agoPassed402167 ms$0.0045
19 h agoPassed402320 ms$0.0045
22 h agoPassed402141 ms$0.0045
26 h agoPassed402111 ms$0.0045
30 h agoPassed402152 ms$0.0045
33 h agoPassed402151 ms$0.0045
39 h agoPassed402156 ms$0.0045