# RelayShield MCP Registry Risk Scorer

> RelayShield MCP Registry Risk Scorer is a paid API for AI agents from api.relayshield.net, paid per call via x402, $0.35/call, status unknown (last checked 2026-10-13).

Scores the risk level of an MCP (Model Context Protocol) registry entry, returning a verdict and findings to help agents identify unsafe or malicious tools

## Facts

- Endpoint: POST https://api.relayshield.net/v1/payg/mcp-registry-risk?utm_source=zero.xyz
- Price: $0.35/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/relayshield-mcp-registry-risk-scorer-eafd72f0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_BM_jSP0N-0Qq9CKkPSvgB

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability relayshield-mcp-registry-risk-scorer-eafd72f0 -d '<json body>'
```

Example prompt: Before I install this MCP tool from the registry, can you run it through RelayShield and tell me the risk verdict and any findings — the registry URL is https://registry.example.com/tools/my-tool?

## When to prefer this

Use this endpoint when an AI agent needs to vet an MCP registry entry before installation or execution, especially in automated pipelines where untrusted tools are ingested. Prefer this over generic URL scanners because it is purpose-built for the MCP ecosystem and returns structured verdicts and findings tailored to AI tool safety signals.

## Known failure modes

- Invalid or unreachable registry URL returns an error verdict
- Malformed input payload results in a 400-level error
- Unknown or unindexed registry entries may return limited findings
- Rate limiting or payment failure returns a non-200 response
- Timeouts if the target registry URL is slow to respond

## How this service works

Assess an MCP server URL for supply-chain and registry risk before your agent connects to it or grants it tool-calling access — flags unverified publishers, known-malicious servers, and other trust signals. Call before an autonomous agent adds a new MCP server to its toolset.

## Output

Returns a JSON object with an 'ok' boolean, a 'verdict' field (e.g. LOW, MEDIUM, HIGH) indicating the overall risk level, and a 'findings' array listing specific issues or threats detected in the MCP registry entry.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "server_url": {
   "type": "string",
   "description": "URL of the MCP server to assess for registry/supply-chain risk"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "data": {
   "verdict": "LOW",
   "findings": []
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/relayshield-mcp-registry-risk-scorer-eafd72f0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.relayshield.net](https://www.zero.xyz/host/api.relayshield.net/llms.txt)