Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "mcp-operation-risk": {
      "type": "http",
      "url": "https://87-106-119-237.sslip.io/mcp-operation-risk/mcp"
    }
  }
}

claude mcp add --transport http mcp-operation-risk https://87-106-119-237.sslip.io/mcp-operation-risk/mcp

[mcp_servers.mcp-operation-risk]
url = "https://87-106-119-237.sslip.io/mcp-operation-risk/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mcp-operation-risk": {
      "type": "remote",
      "url": "https://87-106-119-237.sslip.io/mcp-operation-risk/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "mcp-operation-risk": {
      "type": "http",
      "url": "https://87-106-119-237.sslip.io/mcp-operation-risk/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=mcp-operation-risk&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vODctMTA2LTExOS0yMzcuc3NsaXAuaW8vbWNwLW9wZXJhdGlvbi1yaXNrL21jcCJ9"
}

{
  "servers": {
    "mcp-operation-risk": {
      "type": "http",
      "url": "https://87-106-119-237.sslip.io/mcp-operation-risk/mcp"
    }
  }
}

{
  "mcpServers": {
    "mcp-operation-risk": {
      "httpUrl": "https://87-106-119-237.sslip.io/mcp-operation-risk/mcp"
    }
  }
}

extensions:
  "mcp-operation-risk":
    enabled: true
    name: "mcp-operation-risk"
    type: streamable_http
    uri: "https://87-106-119-237.sslip.io/mcp-operation-risk/mcp"
    timeout: 300

Quality 79 / 100good

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations2 of 2 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 1,160 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes6 tool changes in 30 days
fail
stability.rug_pull2 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

2 tools, about 1,160 tokens to load them all · tool set bdea22463be1 · tools last changed 2026-10-05 · checked 2026-10-20 18:06 UTC

Tool changes

2026-10-05evaluate_operation_riskchangedtitle, description
before
Check whether an intended MCP tool call is safe before execution. Using the source server identity, tool metadata, input schema, and planned arguments, return an operation-level ALLOW, DENY, or REQUIRE_APPROVAL decision. For supported consolidated tools, distinguish read, additive, mutating, and destructive operations, including supported create, update, and delete commands. Unknown, unsupported, or schema-changed calls require approval. Use when whole-tool permissions are too coarse; the evaluator never executes the source call.
after · 64% of words in common
Check whether the actual operation inside an MCP tool call is safe before execution. Use this when one MCP tool exposes multiple operations with different side effects, so whole-tool permissions are too coarse. Provide the native MCP server identity, the tool's tools/list metadata and the intended arguments. For supported consolidated tools, distinguish read, create/add, update/mutate and delete/destructive operations. Return ALLOW, DENY, or REQUIRE_APPROVAL. Unknown, unsupported, ambiguous, or schema-changed calls fail closed with REQUIRE_APPROVAL. The evaluator never executes the source operation.
2026-10-05describe_operation_risk_servicechangeddescription
before
Check whether an intended MCP tool call is safe before execution. Using the source server identity, tool metadata, input schema, and planned arguments, return an operation-level ALLOW, DENY, or REQUIRE_APPROVAL decision. For supported consolidated tools, distinguish read, additive, mutating, and destructive operations, including supported create, update, and delete commands. Unknown, unsupported, or schema-changed calls require approval. Use when whole-tool permissions are too coarse; the evaluator never executes the source call.
after · 64% of words in common
Check whether the actual operation inside an MCP tool call is safe before execution. Use this when one MCP tool exposes multiple operations with different side effects, so whole-tool permissions are too coarse. Provide the native MCP server identity, the tool's tools/list metadata and the intended arguments. For supported consolidated tools, distinguish read, create/add, update/mutate and delete/destructive operations. Return ALLOW, DENY, or REQUIRE_APPROVAL. Unknown, unsupported, ambiguous, or schema-changed calls fail closed with REQUIRE_APPROVAL. The evaluator never executes the source operation.
2026-10-04evaluate_operation_riskchangeddescription, input schemameaning changed
before
Evaluate the operation-level risk of an intended MCP tool call before execution. Returns ALLOW, DENY, or REQUIRE_APPROVAL.
after · 23% of words in common
Check whether an intended MCP tool call is safe before execution. Using the source server identity, tool metadata, input schema, and planned arguments, return an operation-level ALLOW, DENY, or REQUIRE_APPROVAL decision. For supported consolidated tools, distinguish read, additive, mutating, and destructive operations, including supported create, update, and delete commands. Unknown, unsupported, or schema-changed calls require approval. Use when whole-tool permissions are too coarse; the evaluator never executes the source call.
2026-10-04describe_operation_risk_servicechangeddescriptionmeaning changed
before
Analyzes operation-level risk inside consolidated MCP tools. Designed for MCP tools where one tool exposes multiple operations through command/action/method arguments and those operations require different policy outcomes. Returns evidence-backed ALLOW, DENY, or REQUIRE_APPROVAL, schema-drift status, retry semantics, and deterministic operation effect identity. Paid evaluations use x402.
after · 21% of words in common
Check whether an intended MCP tool call is safe before execution. Using the source server identity, tool metadata, input schema, and planned arguments, return an operation-level ALLOW, DENY, or REQUIRE_APPROVAL decision. For supported consolidated tools, distinguish read, additive, mutating, and destructive operations, including supported create, update, and delete commands. Unknown, unsupported, or schema-changed calls require approval. Use when whole-tool permissions are too coarse; the evaluator never executes the source call.
2026-10-04evaluate_operation_riskchangedinput schema
2026-10-04evaluate_operation_riskadded
Evaluate the operation-level risk of an intended MCP tool call before execution. Returns ALLOW, DENY, or REQUIRE_APPROVAL.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 80 / 100

no-repository

provenance45

liveness100

freshness100

hygiene80

+website +reachable +uptime-100% +updated-17d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://87-106-119-237.sslip.io/mcp-operation-risk/mcp` streamable-http	none	yes	100%	788 ms	2026-07-28	2026-10-20

Tools (2)

describe_operation_risk_serviceread-only Check whether the actual operation inside an MCP tool call is safe before execution. Use this when one MCP tool exposes multiple operations with different side effects, so whole-tool permissions are too coarse. Provide the native MCP server identity, the tool's tools/list metadata and the intended arguments. For supported consolidated tools, distinguish read, create/add, update/mutate and delete/destructive operations. Return ALLOW, DENY, or REQUIRE_APPROVAL. Unknown, unsupported, ambiguous, or schema-changed calls fail closed with REQUIRE_APPROVAL. The evaluator never executes the source operation.

evaluate_operation_riskread-only Check whether the actual operation inside an MCP tool call is safe before execution. Use this when one MCP tool exposes multiple operations with different side effects, so whole-tool permissions are too coarse. Provide the native MCP server identity, the tool's tools/list metadata and the intended arguments. For supported consolidated tools, distinguish read, create/add, update/mutate and delete/destructive operations. Return ALLOW, DENY, or REQUIRE_APPROVAL. Unknown, unsupported, ambiguous, or schema-changed calls fail closed with REQUIRE_APPROVAL. The evaluator never executes the source operation.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.dnsreicht/mcp-operation-risk",
  "title": "MCP Operation Risk",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://87-106-119-237.sslip.io/mcp-operation-risk/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.0",
  "websiteUrl": "https://87-106-119-237.sslip.io/v1/mcp-operation-risk/capabilities",
  "description": "Operation-level risk guidance for consolidated MCP tools, including schema drift and retry signals."
}