MCP Radar
MCP Server

AxioRank: Zero-Trust for AI Agents

com.axiorank/axiorank
MCP & Agent Infrastructure Security Public & reachable MCP 2025-11-25

What this MCP does

Governs AI-agent and tool interactions through identity verification, policy enforcement, risk scoring, approvals, quarantine, and audit logs.

Capabilities

Tools

22 tools
axiorank_author_detector
Author a detector from a description
Describe a risk in plain English and AxioRank's AI proposes a custom content detector (regex or keyword) and SAVES it DISABLED for your review. An LLM never arms detection unattended. Outbound content categories only (secret/pii/destructive/injection/egress). Requires the `policies:write` scope and an AI-assessments-enabled plan (Team+).
Open world
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['description'], 'properties': {'description': {'type': 'string', 'maxLength': 2000, 'minLength': 1, 'description': "What to detect, e.g. 'flag AWS secret access keys in tool arguments'."}}}
axiorank_check_approval
Check a held tool call
Poll the verdict of a held (`hold`) tool call. Pass the `approvalId` returned by `axiorank_score_tool_call`. Blocks briefly server-side and returns as soon as an operator approves/denies; otherwise returns the still-`pending` status so you can call again. Requires the `gateway:write` scope and the same agent key that made the original call.
Read only Idempotent
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['approvalId'], 'properties': {'approvalId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$', 'description': "The approvalId returned by axiorank_score_tool_call when the decision was 'hold'."}}}
axiorank_create_agent
Create an agent
Create a new agent in your workspace and return a SHORT-LIVED bootstrap token to start using it immediately (no durable secret is emitted). For long-term auth, add a static key or a federation binding in the dashboard. Requires the `agents:write` scope.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['name'], 'properties': {'name': {'type': 'string', 'maxLength': 120, 'minLength': 1}, 'labels': {'type': 'array', 'items': {'type': 'string', 'maxLength': 60, 'minLength': 1}, 'maxItems': 32}, 'ttlSeconds': {'type': 'integer', 'maximum': 3600, 'minimum': 60, 'description': 'Token lifetime in seconds (60â\x80\x933600). Defaults to 900 (15 min).'}, 'description': {'type': 'string', 'maxLength': 2000}, 'tokenScopes': {'type': 'array', 'items': {'enum': ['gateway:write', 'cards:verify', 'logs:read'], 'type': 'string'}, 'default': ['gateway:write'], 'maxItems': 3, 'minItems': 1, 'description': 'Operational scopes for the token (gateway:write, cards:verify, logs:read).'}}}
axiorank_create_policy
Create a policy (disabled)
Create an outbound governance policy. It is created DISABLED so an LLM can never arm enforcement unattended. Review it (axiorank_get_policy) then enable it with axiorank_update_policy. `toolPattern` is a glob over tool names; `action` is allow / deny / require_approval / redact (redact masks PII in a model completion). Requires the `policies:write` scope.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['name', 'toolPattern', 'action'], 'properties': {'name': {'type': 'string', 'maxLength': 120, 'minLength': 1}, 'action': {'enum': ['allow', 'deny', 'require_approval', 'redact'], 'type': 'string'}, 'context': {'anyOf': [{'type': 'object', 'properties': {'ip': {'type': 'object', 'required': ['anyOf'], 'properties': {'anyOf': {'type': 'array', 'items': {'type': 'string', 'minLength': 1}, 'maxItems': 64, 'minItems': 1}, 'negate': {'type': 'boolean'}}}, 'geo': {'type': 'object', 'required': ['anyOf'], 'properties': {'anyOf': {'type': 'array', 'items': {'type': 'string', 'pattern': '^[A-Za-z]{2}$'}, 'maxItems': 64, 'minItems': 1}, 'negate': {'type': 'boolean'}}}, 'ifc': {'type': 'object', 'properties': {'sinkTypes': {'type': 'array', 'items': {'enum': ['egress', 'destructive', 'state_change'], 'type': 'string'}, 'maxItems': 3, 'minItems': 1}, 'sourceTags': {'type': 'array', 'items': {'type': 'string', 'maxLength': 60, 'minLength': 1}, 'maxItems': 16, 'minItems': 1}, 'propagation': {'enum': ['explicit', 'coarse'], 'type': 'string'}, 'destinations': {'type': 'array', 'items': {'type': 'string', 'maxLength': 253, 'minLength': 1}, 'maxItems': 64, 'minItems': 1}}}, 'args': {'type': 'array', 'items': {'type': 'object', 'required': ['path'], 'properties': {'gt': {'type': 'number'}, 'lt': {'type': 'number'}, 'gte': {'type': 'number'}, 'lte': {'type': 'number'}, 'glob': {'type': 'string', 'maxLength': 200, 'minLength': 1}, 'path': {'type': 'string', 'maxLength': 120, 'minLength': 1}, 'anyOf': {'type': 'array', 'items': {'type': 'string', 'maxLength': 200, 'minLength': 1}, 'maxItems': 64, 'minItems': 1}, 'regex': {'type': 'string', 'maxLength': 512, 'minLength': 1}, 'exists': {'type': 'boolean'}, 'negate': {'type': 'boolean'}, 'contains': {'type': 'string', 'maxLength': 200, 'minLength': 1}}}, 'maxItems': 10, 'minItems': 1}, 'time': {'type': 'object', 'required': ['windows'], 'properties': {'tz': {'type': 'string', 'maxLength': 64, 'minLength': 1}, 'negate': {'type': 'boolean'}, 'windows': {'type': 'array', 'items': {'type': 'object', 'required': ['start', 'end'], 'properties': {'end': {'type': 'string', 'pattern': '^\\d{1,2}:\\d{2}$'}, 'days': {'type': 'array', 'items': {'type': 'integer', 'maximum': 6, 'minimum': 0}}, 'start': {'type': 'string', 'pattern': '^\\d{1,2}:\\d{2}$'}}}, 'maxItems': 32, 'minItems': 1}}}, 'agent': {'type': 'object', 'properties': {'ids': {'type': 'object', 'required': ['anyOf'], 'properties': {'anyOf': {'type': 'array', 'items': {'type': 'string', 'maxLength': 120, 'minLength': 1}, 'maxItems': 64, 'minItems': 1}, 'negate': {'type': 'boolean'}}}, 'labels': {'type': 'object', 'required': ['anyOf'], 'properties': {'anyOf': {'type': 'array', 'items': {'type': 'string', 'maxLength': 120, 'minLength': 1}, 'maxItems': 64, 'minItems': 1}, 'negate': {'type': 'boolean'}}}, 'attributes': {'type': 'object', 'propertyNames': {'type': 'string', 'maxLength': 60, 'minLength': 1}, 'additionalProperties': {'type': 'object', 'required': ['anyOf'], 'properties': {'anyOf': {'type': 'array', 'items': {'type': 'string', 'maxLength': 120, 'minLength': 1}, 'maxItems': 64, 'minItems': 1}, 'negate': {'type': 'boolean'}}}}}}, 'chain': {'type': 'object', 'properties': {'anyOf': {'type': 'array', 'items': {'enum': ['exfiltration', 'recon_then_destroy', 'injection_then_action'], 'type': 'string'}, 'maxItems': 3, 'minItems': 1}, 'minSeverity': {'enum': ['low', 'medium', 'high', 'critical'], 'type': 'string'}, 'valueConfirmed': {'type': 'boolean'}}}, 'model': {'type': 'object', 'required': ['anyOf'], 'properties': {'anyOf': {'type': 'array', 'items': {'type': 'string', 'maxLength': 120, 'minLength': 1}, 'maxItems': 64, 'minItems': 1}, 'negate': {'type': 'boolean'}}}, 'budget': {'type': 'object', 'required': ['metric', 'window', 'gte'], 'properties': {'gte': {'type': 'number', 'maximum': 1000000000, 'minimum': 0}, 'metric': {'enum': ['calls', 'cost_usd'], 'type': 'string'}, 'window': {'enum': ['hour', 'day', 'month'], 'type': 'string'}}}, 'novelty': {'type': 'object', 'required': ['gte'], 'properties': {'gte': {'type': 'number', 'maximum': 1, 'minimum': 0}}}, 'commerce': {'type': 'object', 'properties': {'onViolation': {'type': 'boolean'}}}, 'resource': {'type': 'object', 'properties': {'host': {'type': 'object', 'required': ['anyOf'], 'properties': {'anyOf': {'type': 'array', 'items': {'type': 'string', 'maxLength': 120, 'minLength': 1}, 'maxItems': 64, 'minItems': 1}, 'negate': {'type': 'boolean'}}}, 'type': {'type': 'object', 'required': ['anyOf'], 'properties': {'anyOf': {'type': 'array', 'items': {'enum': ['database', 'http_api', 'filesystem', 'messaging', 'other'], 'type': 'string'}, 'maxItems': 5, 'minItems': 1}, 'negate': {'type': 'boolean'}}}, 'environment': {'type': 'object', 'required': ['anyOf'], 'properties': {'anyOf': {'type': 'array', 'items': {'enum': ['production', 'staging', 'development', 'unknown'], 'type': 'string'}, 'maxItems': 4, 'minItems': 1}, 'negate': {'type': 'boolean'}}}}}, 'agentRisk': {'type': 'object', 'required': ['gte'], 'properties': {'gte': {'type': 'number', 'maximum': 100, 'minimum': 0}}}, 'callCostUsd': {'type': 'object', 'required': ['gte'], 'properties': {'gte': {'type': 'number', 'maximum': 1000000, 'minimum': 0}}}, 'agentDaysOld': {'type': 'object', 'required': ['lte'], 'properties': {'lte': {'type': 'number', 'maximum': 3650, 'minimum': 0}}}, 'mlThreatClass': {'type': 'object', 'required': ['anyOf'], 'properties': {'anyOf': {'type': 'array', 'items': {'enum': ['prompt_injection', 'jailbreak', 'data_exfiltration', 'malware', 'social_engineering', 'policy_violation'], 'type': 'string'}, 'maxItems': 6, 'minItems': 1}}}}}, {'type': 'null'}]}, 'priority': {'type': 'integer', 'default': 100, 'maximum': 9007199254740991, 'minimum': -9007199254740991}, 'toolPattern': {'type': 'string', 'maxLength': 200, 'minLength': 1}, 'riskThreshold': {'anyOf': [{'type': 'integer', 'maximum': 100, 'minimum': 0}, {'type': 'null'}], 'default': None}, 'signalCategory': {'anyOf': [{'enum': ['secret', 'pii', 'destructive', 'injection', 'egress', 'malware', 'financial'], 'type': 'string'}, {'type': 'null'}]}, 'enforcementMode': {'enum': ['monitor', 'enforce'], 'type': 'string', 'default': 'enforce'}}}
axiorank_get_agent
Get an agent
Fetch one agent's posture (quarantine state, labels, last-used, revocation) by id, scoped to your workspace. Requires the `agents:read` scope.
Read only Idempotent
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['agentId'], 'properties': {'agentId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$', 'description': "The agent's UUID (from axiorank_list_agents)."}}}
axiorank_get_health
Get AxioRank health
Liveness/readiness probe for the AxioRank control plane (API + database reachability). Returns `status: ok|degraded`.
Read only Idempotent
Input schema 
{'type': 'object', 'properties': {}}
axiorank_get_incident
Get incident kill-chain evidence
Fetch the kill-chain finding behind an alert (the multi-step attack pattern, severity, and the contributing tool-call ids) by alert id. Returns null evidence for a non-kill-chain alert. Requires the `logs:read` scope.
Read only Idempotent
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['alertId'], 'properties': {'alertId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$', 'description': 'The alert/incident UUID (from axiorank_list_incidents).'}}}
axiorank_get_policy
Get a policy
Fetch one outbound policy by id, scoped to your workspace. Requires the `policies:read` scope.
Read only Idempotent
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['policyId'], 'properties': {'policyId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$', 'description': "The policy's UUID (from axiorank_list_policies)."}}}
axiorank_get_protocol_coverage
Get protocol coverage
List the agent-interop protocols AxioRank can govern (A2A, MCP, OAuth, x402, DIDs, robots.txt/llms.txt, AP2, …), grouped into six planes, each with coverage status (live/beta/planned) and direction (inbound/outbound/both). Use this to discover what AxioRank speaks before wiring up card verification or inbound bot management.
Read only Idempotent
Input schema 
{'type': 'object', 'properties': {}}
axiorank_get_usage
Get usage & plan
Report this billing period's usage for your workspace: plan tier, governed events used vs the monthly limit, and ML assessments used. Requires the `logs:read` scope.
Read only Idempotent
Input schema 
{'type': 'object', 'properties': {}}
axiorank_issue_token
Issue a short-lived agent token
Mint a short-lived, scoped `axr_tok_…` access token for an existing agent. This is the Zero-Trust credential the agent sends as `Authorization: Bearer <token>`. It expires within the hour and cannot be replayed afterwards. Durable static keys are issued in the dashboard, not here. Requires the `keys:write` scope.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['agentId'], 'properties': {'scopes': {'type': 'array', 'items': {'enum': ['gateway:write', 'cards:verify', 'logs:read'], 'type': 'string'}, 'default': ['gateway:write'], 'maxItems': 3, 'minItems': 1, 'description': 'Operational scopes for the token (gateway:write, cards:verify, logs:read).'}, 'agentId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$', 'description': "The agent's UUID (from axiorank_list_agents)."}, 'ttlSeconds': {'type': 'integer', 'maximum': 3600, 'minimum': 60, 'description': 'Token lifetime in seconds (60â\x80\x933600). Defaults to 900 (15 min).'}}}
axiorank_list_agents
List agents
List the active agents in your AxioRank workspace (id, name, labels, quarantine + last-used status). Use this to find an agent's id before calling agent-specific tools. Requires the `agents:read` scope.
Read only Idempotent
Input schema 
{'type': 'object', 'properties': {}}
axiorank_list_incidents
List incidents
List security alerts/incidents in your workspace, newest first, filterable by status (open/acknowledged/resolved/suppressed), severity (low/medium/high/critical) and kind (high_risk/anomaly/auto_response/kill_chain/ml_threat). Requires the `logs:read` scope.
Read only Idempotent
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'kind': {'enum': ['high_risk', 'anomaly', 'auto_response', 'kill_chain', 'ml_threat'], 'type': 'string'}, 'limit': {'type': 'integer', 'default': 50, 'maximum': 200, 'minimum': 1}, 'status': {'enum': ['open', 'acknowledged', 'resolved', 'suppressed'], 'type': 'string'}, 'severity': {'enum': ['low', 'medium', 'high', 'critical'], 'type': 'string'}}}
axiorank_list_ml_assessments
List ML assessments
List your workspace's most recent ML/LLM threat assessments (model verdict, threat class, confidence, recommendation) for tool calls and cards. Requires the `logs:read` scope.
Read only Idempotent
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'limit': {'type': 'integer', 'default': 50, 'maximum': 200, 'minimum': 1}}}
axiorank_list_policies
List policies
List the outbound governance policies in your workspace (enabled or not), each with its tool pattern, action (allow/deny/require_approval/redact), risk threshold, priority and enabled flag. Requires the `policies:read` scope.
Read only Idempotent
Input schema 
{'type': 'object', 'properties': {}}
axiorank_list_threat_intel
List network threat intel
List external identities (card hosts/keys) flagged across the AxioRank network, with k-anonymity-gated aggregate counts (workspaces, sightings, deny/review, max risk). This is the shared cross-tenant feed, not your private data. Requires the `logs:read` scope.
Read only Idempotent
Input schema 
{'type': 'object', 'properties': {}}
axiorank_quarantine_agent
Quarantine or release an agent
Reversible kill switch: quarantine an agent so the gateway DENIES all of its tool calls, or release it. Set `quarantine: false` to restore. Requires the `agents:write` scope.
Destructive Idempotent
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['agentId', 'quarantine'], 'properties': {'agentId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$', 'description': "The agent's UUID (from axiorank_list_agents)."}, 'quarantine': {'type': 'boolean', 'description': 'true = quarantine (deny all its calls); false = release.'}}}
axiorank_revoke_agent
Revoke an agent
Permanently revoke an agent: its API keys stop authenticating immediately (incident response). Irreversible. Issue a new agent to restore access. Its audit history is kept. Requires the `agents:write` scope. Prefer `axiorank_quarantine_agent` for a reversible pause.
Destructive Idempotent
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['agentId'], 'properties': {'agentId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$', 'description': "The agent's UUID (from axiorank_list_agents)."}}}
axiorank_score_tool_call
Score an agent tool call
Inspect a proposed agent tool call BEFORE executing it. AxioRank scores its risk (0–100), runs content inspection (secrets, PII, destructive ops, prompt-injection, egress), applies your policies, records an audit log, and returns a decision: `allow`, `deny`, or `hold`. On `hold`, a human must approve. Poll `axiorank_check_approval` with the returned `approvalId`. Call this in your tool-use loop and refuse or wait on any non-`allow` decision. Requires the `gateway:write` scope.
Open world
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['tool'], 'properties': {'tool': {'type': 'string', 'maxLength': 200, 'minLength': 1}, 'model': {'type': 'string', 'maxLength': 200, 'minLength': 1}, 'phase': {'enum': ['request', 'result', 'prompt', 'completion'], 'type': 'string', 'default': 'request'}, 'intent': {'type': 'string', 'maxLength': 1000, 'minLength': 1}, 'source': {'enum': ['sdk', 'mcp', 'coding-agent', 'browser-agent'], 'type': 'string'}, 'context': {'type': 'string', 'maxLength': 200000}, 'costUsd': {'type': 'number', 'maximum': 1000000, 'minimum': 0}, 'traceId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$'}, 'metadata': {'type': 'object', 'propertyNames': {'type': 'string', 'maxLength': 64, 'minLength': 1}, 'additionalProperties': {'anyOf': [{'type': 'string', 'maxLength': 256}, {'type': 'number'}, {'type': 'boolean'}]}}, 'passport': {'type': 'boolean'}, 'arguments': {'type': 'object', 'default': {}, 'propertyNames': {'type': 'string'}, 'additionalProperties': {}}, 'sessionId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$'}, 'stepIndex': {'type': 'integer', 'maximum': 100000, 'minimum': 0}, 'durationMs': {'type': 'integer', 'maximum': 86400000, 'minimum': 0}, 'promptText': {'type': 'string', 'maxLength': 200000}, 'resultText': {'type': 'string', 'maxLength': 200000}, 'inputTokens': {'type': 'integer', 'maximum': 100000000, 'minimum': 0}, 'taintHandle': {'type': 'string', 'maxLength': 16384}, 'outputTokens': {'type': 'integer', 'maximum': 100000000, 'minimum': 0}, 'completionText': {'type': 'string', 'maxLength': 200000}, 'parentStepIndex': {'type': 'integer', 'maximum': 100000, 'minimum': 0}}}
axiorank_search_audit_logs
Search audit logs
Search your workspace's governance audit trail, newest first, with filters: decision (allow/deny/hold), source (sdk/mcp), agentId, tool name (substring), minimum risk, and a time window (ISO `from`/`to`). Payloads are already secret-redacted. Use it to answer questions like "show denied tool calls in the last 24h". Requires the `logs:read` scope.
Read only Idempotent
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'to': {'type': 'string', 'description': 'ISO timestamp: exclusive upper bound on created_at.'}, 'from': {'type': 'string', 'description': 'ISO timestamp: inclusive lower bound on created_at.'}, 'tool': {'type': 'string', 'maxLength': 200, 'description': 'Case-insensitive substring of the tool name.'}, 'limit': {'type': 'integer', 'default': 50, 'maximum': 200, 'minimum': 1}, 'source': {'enum': ['sdk', 'mcp', 'coding-agent', 'browser-agent'], 'type': 'string'}, 'agentId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$'}, 'minRisk': {'type': 'integer', 'maximum': 100, 'minimum': 0}, 'decision': {'enum': ['allow', 'deny', 'hold'], 'type': 'string'}}}
axiorank_update_policy
Update a policy
Update an existing policy: enable/disable it, rename it, or change its priority. (Other fields are edited in the dashboard.) Requires the `policies:write` scope.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['policyId'], 'properties': {'name': {'type': 'string', 'maxLength': 120, 'minLength': 1}, 'enabled': {'type': 'boolean', 'description': 'Arm (true) or disarm (false) the policy.'}, 'policyId': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$', 'description': "The policy's UUID (from axiorank_list_policies)."}, 'priority': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': -9007199254740991, 'description': 'Lower runs first; ties broken by creation order.'}}}
axiorank_verify_card
Verify an agent/server card
Vet a remote agent or tool's identity card (A2A Agent Card, MCP server card, OAuth metadata, x402, …) BEFORE connecting to it. Supply EITHER `url` (AxioRank fetches the card) OR an inline `document`. AxioRank verifies signatures, scores supply-chain risk, folds in cross-tenant threat intel, and returns `allow` / `review` / `deny` with the resolved identity, capabilities and auth. Use it as a connection preflight. Requires the `cards:verify` scope.
Open world
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'url': {'type': 'string', 'format': 'uri', 'maxLength': 2048}, 'document': {}, 'protocol': {'enum': ['a2a', 'mcp', 'oauth', 'api-catalog', 'x402', 'acp', 'ucp', 'mpp', 'did', 'acp-comm', 'anp', 'agntcy-slim', 'authmd', 'ap2', 'content-permission', 'agntcy-directory', 'nlweb', 'ans', 'agent-skills', 'webmcp', 'nanda', 'vc', 'visa-tap', 'spiffe', 'agents-json', 'l402', 'oid4vci', 'authzen', 'mc-agent-pay', 'visa-intelligent-commerce', 'skyfire', 'nekuda', 'amex-agent-pay', 'paypal-agentic-checkout'], 'type': 'string'}}}
History

Recent tool changes

Added
axiorank_author_detector
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_create_agent
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_issue_token
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_get_usage
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_list_ml_assessments
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_list_threat_intel
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_get_incident
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_list_incidents
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_search_audit_logs
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_update_policy
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_create_policy
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_get_policy
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_list_policies
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_revoke_agent
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_quarantine_agent
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_get_agent
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_list_agents
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_get_health
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_get_protocol_coverage
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_check_approval
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_verify_card
Sept. 17, 2026, 12:33 p.m.
Added
axiorank_score_tool_call
Sept. 17, 2026, 12:33 p.m.
Discover

Similar MCP servers

AIMEAT

io.aimeat/aimeat

Provides a self-hosted agent operating system with agent work delegation, access controls, federation, hooks, SSO, security admin…

hyperion

com.thetempleofdoom.hyperion/hyperion

Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…

Japan Public Ledgers MCP

com.mcp-revenue-empire/japan-public-ledgers

Provides agent identity, memory, audit, trust, proxy, temporary email, webhook, CAPTCHA, and alerting capabilities alongside publ…

PHION Agent Trust Infrastructure

systems.phion/evidence-engine

Provides agent trust, policy, provenance, evidence, delegation, telemetry, and transaction-control services for MCP and agent wor…

Swamp

world.swampai/swamp

Coordinates security agents through scoped bug-bounty programs, target claims, vulnerability submissions, peer review, shared fin…

AgentBIT

app.agentbit/mcp

Routes pay-per-call tools over x402 on Base, covering discovery, data conversion, company research, counterparty screening, domai…

SaSame MCP Observatory + Gold Rush Town

online.sasame/research

Audits and profiles MCP servers, provides ecosystem analytics, trust and claim records, and non-custodial transaction or escrow a…

ThinkNEO Control Plane

ai.thinkneo/control-plane

Provides an enterprise AI control plane for governance, guardrails, spend tracking, compliance, and model or tool routing.