# MCP Operation Risk Evaluator

> MCP Operation Risk Evaluator is a paid API for AI agents from 87-106-119-237.sslip.io, paid per call via x402, $0.0045/call, status unknown (last checked 2026-10-17).

Analyzes risk of a named operation within an MCP tool and returns a deterministic ALLOW, DENY, or REQUIRE_APPROVAL decision with retry semantics and schema-drift detection.

## Facts

- Endpoint: POST https://87-106-119-237.sslip.io/v1/mcp-operation-risk/evaluate?utm_source=zero.xyz
- Price: $0.0045/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-17
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/mcp-operation-risk-evaluator-3eb16956
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_yQg4goOaEcqwy8KPgyQQR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability mcp-operation-risk-evaluator-3eb16956 -d '<json body>'
```

Example prompt: Before running the 'delete_database' operation on the 'db-manager' tool from MCP server 'prod-mcp-01' (version 2.1.0), check its risk level and tell me whether you should auto-execute it, block it, or escalate for my approval — include the schema digest abc123...def456 from the latest tools/list.

## When to prefer this

Choose this endpoint when your agent orchestration layer needs a fast, deterministic, evidence-backed gate before executing MCP tool operations with varying risk profiles — especially when those tools expose commands ranging from read-only to destructive. It is particularly valuable when you need schema-drift detection to catch tool definition changes between deployments, and when you need a stable operation effect ID for audit logging. Prefer it over generic LLM-based risk reasoning when you need reproducible, hash-deterministic decisions that can be cached or compared across runs.

## Known failure modes

- Missing schema_digest causes the endpoint to default to REQUIRE_APPROVAL rather than a definitive decision
- Unknown server_id or tool_name may result in insufficient evidence for a deterministic ruling
- Malformed schema_digest (not a valid 64-char hex string) causes a validation error
- Operation string exceeding 240 characters is rejected
- Network or payment failure returns a 402 or 5xx error with no decision

## How this service works

Analyze operation-level risk inside consolidated MCP tools. Returns evidence-backed ALLOW, DENY, or REQUIRE_APPROVAL decisions, retry semantics, schema-drift status, and a deterministic operation effect ID. Designed for MCP tools whose command/action arguments expose operations with different risk levels.

## Output

Returns a structured risk decision (ALLOW, DENY, or REQUIRE_APPROVAL) backed by evidence, along with retry semantics indicating how the caller should handle failures, a schema-drift status comparing the provided schema digest against known good versions, and a deterministic operation effect ID derived from the input arguments hash for auditability.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "tool": {
   "type": "object",
   "title": "NativeToolRecord",
   "required": [
    "name",
    "description",
    "inputSchema"
   ],
   "properties": {
    "name": {
     "type": "string",
     "title": "Name",
     "description": "Exact tool name from the MCP server's tools/list response."
    },
    "_meta": {
     "anyOf": [
      {
       "type": "object",
       "additionalProperties": true
      },
      {
       "type": "null"
      }
     ],
     "title": "Meta",
     "default": null,
     "description": "Relevant tool metadata from tools/list, when present."
    },
    "icons": {
     "anyOf": [
      {
       "type": "array",
       "items": {
        "type": "object",
        "additionalProperties": true
       }
      },
      {
       "type": "null"
      }
     ],
     "title": "Icons",
     "default": null,
     "description": "Tool icons from tools/list, when present."
    },
    "title": {
     "anyOf": [
      {
       "type": "string"
      },
      {
       "type": "null"
      }
     ],
     "title": "Title",
     "default": null,
     "description": "Tool title from tools/list, when provided by the server."
    },
    "execution": {
     "anyOf": [
      {
       "type": "object",
       "additionalProperties": true
      },
      {
       "type": "null"
      }
     ],
     "title": "Execution",
     "default": null,
     "description": "Tool execution metadata from tools/list, when present."
    },
    "annotations": {
     "type": "object",
     "title": "Annotations",
     "description": "Tool annotations from tools/list, such as read-only or destructive hints; use an empty object when absent.",
     "additionalProperties": true
    },
    "description": {
     "anyOf": [
      {
       "type": "string"
      },
      {
       "type": "null"
      }
     ],
     "title": "Description",
     "description": "Tool description from tools/list, or null if the server omitted it."
    },
    "inputSchema": {
     "type": "object",
     "title": "Inputschema",
     "description": "Complete inputSchema from tools/list; used to validate the intended arguments and match a supported tool manifest.",
     "additionalProperties": true
    },
    "outputSchema": {
     "anyOf": [
      {
       "type": "object",
       "additionalProperties": true
      },
      {
       "type": "null"
      }
     ],
     "title": "Outputschema",
     "default": null,
     "description": "Tool output schema from tools/l
… (truncated)
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/mcp-operation-risk-evaluator-3eb16956/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from 87-106-119-237.sslip.io](https://www.zero.xyz/host/87-106-119-237.sslip.io/llms.txt)