Mcp Tool Risk Score

Heuristic MCP tool risk review for an MCP tool manifest before you wire it into an agent.

Overview

Heuristic MCP tool risk review for an MCP tool manifest before you wire it into an agent. Send the tool definitions (name, description, inputSchema) plus optional deployment context and get back a mcp permission review with per-tool scores for permission scope, prompt-injection surface, and destructive-action risk, each with reasons, plus an overall tool security score. This is a heuristic pass over manifest text, not a formal security guarantee or penetration test, so treat low scores as 'looks lower-risk on paper', not 'certified safe'. Use it as an agent tool audit step in CI, an MCP catalog screening pass, or a quick second opinion before granting a new tool broad access.

Endpoint

Method	Endpoint	Price	Description
POST	/v1/marketplace/api/mcp-tool-risk-score	$0.023	Invoke Mcp Tool Risk Score (General) and return the upstream response.

How to call it

Requests are paid per call over the x402 protocol. Call the endpoint, receive a 402 Payment Required quote, then repeat the request with the signed payment header. The SDKs do both steps for you.

# 1. Ask for a quote
curl -i -X POST https://api.jarvisclaw.ai/v1/marketplace/api/mcp-tool-risk-score \
  -H 'Content-Type: application/json' \
  -d '{}'

# 2. Pay it (the SDK signs and retries for you)
curl -X POST https://api.jarvisclaw.ai/v1/marketplace/api/mcp-tool-risk-score \
  -H 'Content-Type: application/json' \
  -H 'X-PAYMENT: <signed-payload>' \
  -d '{}'

Open in the marketplace