← All servers

I

InterAI Risk Oracle

warnings

ai-risk-oracle.fly.dev

Policy gate and signed trust receipts for autonomous agent actions.

https://ai-risk-oracle.fly.dev/mcpNo authMCP 2025-11-25v0.1.3-beta.1last checked 18 Oct 2026spoke MCP on 98.8% of 85 checks (30 days)initialize in 517 ms

Will my client connect?

Decided from what the probe found at the endpoint, and from what each client's own documentation says it can complete. Every row carries the day that documentation was read.

✓Claude CodeConnects

The endpoint answers an anonymous handshake, so no credential is needed.

claude mcp add --transport http interai-risk-oracle https://ai-risk-oracle.fly.dev/mcp

Claude Code docs · read on 2026-08-30

✓Claude (claude.ai & Desktop)Connects

The endpoint answers an anonymous handshake, so no credential is needed.

Settings → Connectors → Add custom connector, then paste https://ai-risk-oracle.fly.dev/mcp.

Claude (claude.ai & Desktop) docs · read on 2026-08-30

✓ChatGPTConnects

The endpoint answers an anonymous handshake, so no credential is needed.

Settings → Apps → Advanced settings → Developer mode, then create a connector pointing at https://ai-risk-oracle.fly.dev/mcp.

ChatGPT docs · read on 2026-08-30

✓CursorConnects

The endpoint answers an anonymous handshake, so no credential is needed.

{
  "mcpServers": {
    "interai-risk-oracle": {
      "url": "https://ai-risk-oracle.fly.dev/mcp"
    }
  }
}

Cursor docs · read on 2026-08-30

✓VS Code (Copilot)Connects

The endpoint answers an anonymous handshake, so no credential is needed.

{
  "servers": {
    "interai-risk-oracle": {
      "type": "http",
      "url": "https://ai-risk-oracle.fly.dev/mcp"
    }
  }
}

VS Code (Copilot) docs · read on 2026-08-30

How to authenticate

Checked against the endpoint by our probe on 18 Oct 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	No auth
Protected-resource metadata	✕Not found Without it a client has to guess where the authorization server lives.
Anonymous access	Handshake succeeds; 9 tools listable
Credentials demanded in prose	✕oracle.verify_autonomous_action These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error.

What the probe found

warningTools needing credentials are listed without a challenge

1 of the 9 tools listed anonymously say in their own descriptions that they need an account or a key (oracle.verify_autonomous_action), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

No CORS headers for browser-based clients

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

Tools

oracle.agent_cardoracle.discovery_bundleoracle.get_pricingoracle.get_trust_receiptoracle.service_descriptororacle.verify_autonomous_actionoracle.verify_batchoracle.verify_responseoracle.verify_trust_receipt_signature

Contract history

16 Sep 2026v0.1.3-beta.1no contract changes

15 Sep 2026v0.1.3-beta8 cosmeticinstructions rewritten

Instructions rewritten: oracle://meta/runtime, oracle://schema/trust-receipt, oracle://schema/trust-receipt-public, oracle://schema/verify-result, oracle://service/agent-card, oracle://service/descriptor, oracle://service/discovery-bundle, oracle://service/pricing. The description an agent follows changed; the callable contract may not have.

11 Sep 2026v0.1.3-beta3 breaking

Breaking: oracle.verify_autonomous_action, oracle.verify_batch, oracle.verify_response

10 Sep 2026v0.1.3-beta1 breaking8 compatibleinstructions rewritten

Breaking: oracle.verify_trust_receipt_signature

Instructions rewritten: oracle.get_trust_receipt, oracle.verify_autonomous_action, oracle.verify_batch, oracle.verify_response, oracle.verify_trust_receipt_signature. The description an agent follows changed; the callable contract may not have.

9 Sep 2026v0.1.3-beta2 breaking1 cosmetic

Breaking: oracle.verify_batch, oracle.verify_response

8 Sep 2026v0.1.3-beta9 cosmeticinstructions rewritten

Instructions rewritten: oracle.agent_card, oracle.discovery_bundle, oracle.get_pricing, oracle.get_trust_receipt, oracle.service_descriptor, oracle.verify_autonomous_action, oracle.verify_batch, oracle.verify_response, oracle.verify_trust_receipt_signature. The description an agent follows changed; the callable contract may not have.

7 Sep 2026v0.1.3-beta2 breaking1 compatible

Breaking: oracle.verify_batch, oracle.verify_response

5 Sep 2026v0.1.3-beta1 cosmeticinstructions rewritten

Instructions rewritten: oracle://service/discovery-bundle. The description an agent follows changed; the callable contract may not have.

2 Sep 2026v0.1.3-betafirst recorded contract

Watch this server

Save its public contract as a baseline and manage breaking-change email alerts.

Own this server?

Sign in to claim this listing by proving control of its host.

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/interai-risk-oracle/badge.svg)](https://mcpi.app/servers/interai-risk-oracle)