Stop your agent before it runs rm -rf /etc or emails your .env. Deterministic preflight checks.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Analyze a proposed AI-agent tool call before execution and return a deterministic, policy-aware decision (allow, notice, confirm or block) covering destructive actions, sensitive-data exposure, external transmission, privilege changes and irreversible operations, under the applicable policy — permissive, balanced or strict, balanced by default. Filesystem paths outside a known workspace_root are treated as higher risk than paths inside it.
The proposed tool arguments. They are analyzed as data and never executed.
The exact name of the proposed tool.
Optional policy used to compute the decision: permissive, balanced or strict (default: balanced).
Optional declarative context about the proposed operation.
Analyze a proposed AI-agent tool call before execution and return a deterministic, policy-aware decision (allow, notice, confirm or block) covering destructive actions, sensitive-data exposure, external transmission, privilege changes and irreversible operations, under the applicable policy — permissive, balanced or strict, balanced by default. Filesystem paths outside a known workspace_root are treated as higher risk than paths inside it.
| Argument | Type | Description |
|---|---|---|
| policy | string | Optional policy used to compute the decision: permissive, balanced or strict (default: balanced). |
| context | object | Optional declarative context about the proposed operation. |
| arguments* | any | The proposed tool arguments. They are analyzed as data and never executed. |
| tool_name* | string | The exact name of the proposed tool. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"tool_name",
"arguments"
],
"properties": {
"policy": {
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string",
"description": "Optional policy used to compute the decision: permissive, balanced or strict (default: balanced)."
},
"context": {
"type": "object",
"properties": {
"operation": {
"type": "string",
"maxLength": 4096
},
"description": {
"type": "string",
"maxLength": 4096
},
"destination": {
"type": "string",
"maxLength": 4096
},
"target_type": {
"type": "string",
"maxLength": 4096
},
"workspace_root": {
"type": "string",
"maxLength": 4096,
"description": "Optional workspace root. Filesystem paths that resolve outside it are treated as higher risk than paths inside it."
}
},
"description": "Optional declarative context about the proposed operation.",
"additionalProperties": false
},
"arguments": {
"anyOf": [
{
"type": "object",
"additionalProperties": {}
},
{
"type": "array",
"items": {}
},
{
"type": "string"
},
{
"type": "number"
},
{
"type": "boolean"
},
{
"type": "null"
}
],
"description": "The proposed tool arguments. They are analyzed as data and never executed."
},
"tool_name": {
"type": "string",
"maxLength": 256,
"minLength": 1,
"description": "The exact name of the proposed tool."
}
},
"additionalProperties": false
}Analyze a URL for structural and security risk signals and return a deterministic, policy-aware decision (allow, notice, confirm or block) under the applicable policy — permissive, balanced or strict, balanced by default.
| Argument | Type | Description |
|---|---|---|
| url* | string | The absolute URL to analyze. |
| policy | string | Optional policy used to compute the decision: permissive, balanced or strict (default: balanced). |
| context | object | Optional declarative context. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"minLength": 1,
"description": "The absolute URL to analyze."
},
"policy": {
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string",
"description": "Optional policy used to compute the decision: permissive, balanced or strict (default: balanced)."
},
"context": {
"type": "object",
"properties": {
"workspace_root": {
"type": "string",
"description": "Accepted for contract consistency; URL analysis has no filesystem paths to scope, so it has no effect here."
}
},
"description": "Optional declarative context.",
"additionalProperties": false
}
},
"additionalProperties": false
}Analyze a shell command before execution and return a deterministic, policy-aware decision (allow, notice, confirm or block) without running it, under the applicable policy — permissive, balanced or strict, balanced by default. Paths outside a known workspace_root are treated as higher risk than paths inside it.
| Argument | Type | Description |
|---|---|---|
| cwd | string | Optional working-directory context. It is never accessed. |
| shell | string | The command shell, when known. |
| policy | string | Optional policy used to compute the decision: permissive, balanced or strict (default: balanced). |
| command* | string | The complete command text to inspect without executing it. |
| context | object | Optional declarative context. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"command"
],
"properties": {
"cwd": {
"type": "string",
"maxLength": 4096,
"description": "Optional working-directory context. It is never accessed."
},
"shell": {
"enum": [
"bash",
"sh",
"zsh",
"powershell",
"cmd",
"unknown"
],
"type": "string",
"description": "The command shell, when known."
},
"policy": {
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string",
"description": "Optional policy used to compute the decision: permissive, balanced or strict (default: balanced)."
},
"command": {
"type": "string",
"maxLength": 16384,
"minLength": 1,
"description": "The complete command text to inspect without executing it."
},
"context": {
"type": "object",
"properties": {
"workspace_root": {
"type": "string",
"maxLength": 4096,
"description": "Optional workspace root. Paths that resolve outside it are treated as higher risk than paths inside it."
}
},
"description": "Optional declarative context.",
"additionalProperties": false
}
},
"additionalProperties": false
}Inspect a Base64-encoded file locally for deterministic structural and security risk signals without executing it, and return a policy-aware decision (allow, notice, confirm or block) under the applicable policy — permissive, balanced or strict, balanced by default.
| Argument | Type | Description |
|---|---|---|
| policy | string | Optional policy used to compute the decision: permissive, balanced or strict (default: balanced). |
| context | object | Optional declarative context. |
| filename* | string | The original filename, including its extension. |
| content_base64* | string | The complete file content encoded as canonical Base64 (maximum decoded size: 1 MiB). |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"filename",
"content_base64"
],
"properties": {
"policy": {
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string",
"description": "Optional policy used to compute the decision: permissive, balanced or strict (default: balanced)."
},
"context": {
"type": "object",
"properties": {
"workspace_root": {
"type": "string",
"description": "Accepted for contract consistency; file inspection has no filesystem paths to scope, so it has no effect here."
}
},
"description": "Optional declarative context.",
"additionalProperties": false
},
"filename": {
"type": "string",
"minLength": 1,
"description": "The original filename, including its extension."
},
"content_base64": {
"type": "string",
"description": "The complete file content encoded as canonical Base64 (maximum decoded size: 1 MiB)."
}
},
"additionalProperties": false
}