Shadow AI List
mcp remote · streamable-http · v1.0.0 · source: crawl
https://ailist.airiskmanagement.ca/mcp
Risk-ranked registry of AI tools: look up an AI tool's risk or check if a domain is shadow AI.
Works
100
Verified Oct 31, 2026 · p50 444 ms · p95 470 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'shadow-ai-list' |
| tools_listed | 15 | pass | 4 tools |
| schema_complete | 15 | pass | 4 of 4 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 444 ms |
| latency_p95 | 5 | pass | p95 470 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (4)
| Name | Description | Schema |
|---|---|---|
lookup_ai_tool_risk | Look up an AI tool by name, vendor, or domain and return its AI Exposure Index risk score, risk band, category, and whether it trains on user data. Covers the free top 100. | typed |
check_domain_against_registry | Check whether a domain or subdomain belongs to a known AI tool - i.e. whether traffic to it is shadow AI. Returns the tool and its risk if matched. Covers the free top 100. | typed |
list_shadow_ai | List AI tools from the registry, optionally filtered by category. Returns name, domain, category, and risk band. Covers the free top 100. | typed |
get_top_risky_ai | Get the highest-risk AI tools by AI Exposure Index risk score. Returns name, domain, category, and risk score + band. Covers the free top 100. | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/ca-airiskmanagement-shadow-ai-list)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.