AxioRank: Zero-Trust for AI Agents
mcp remote · streamable-http · v1.0.1 · source: crawl
https://app.axiorank.com/api/mcp-server/mcp
Zero-trust gateway for AI agents: score tool calls, verify agent cards, enforce policy, audit.
Works
100
Verified Oct 31, 2026 · p50 614 ms · p95 720 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'axiorank' |
| tools_listed | 15 | pass | 22 tools |
| schema_complete | 15 | pass | 20 of 22 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 614 ms |
| latency_p95 | 5 | pass | p95 720 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (22)
| Name | Description | Schema |
|---|---|---|
axiorank_update_policy | Update an existing policy: enable/disable it, rename it, or change its priority. (Other fields are edited in the dashboard.) Requires the `policies:write` scope. | typed |
axiorank_score_tool_call | Inspect a proposed agent tool call BEFORE executing it. AxioRank scores its risk (0–100), runs content inspection (secrets, PII, destructive ops, prompt-injection, egress), applies your policies, reco | typed |
axiorank_verify_card | Vet a remote agent or tool's identity card (A2A Agent Card, MCP server card, OAuth metadata, x402, …) BEFORE connecting to it. Supply EITHER `url` (AxioRank fetches the card) OR an inline `document`. | incomplete |
axiorank_check_approval | Poll the verdict of a held (`hold`) tool call. Pass the `approvalId` returned by `axiorank_score_tool_call`. Blocks briefly server-side and returns as soon as an operator approves/denies; otherwise re | typed |
axiorank_get_protocol_coverage | List the agent-interop protocols AxioRank can govern (A2A, MCP, OAuth, x402, DIDs, robots.txt/llms.txt, AP2, …), grouped into six planes, each with coverage status (live/beta/planned) and direction (i | typed |
axiorank_get_health | Liveness/readiness probe for the AxioRank control plane (API + database reachability). Returns `status: ok|degraded`. | typed |
axiorank_list_agents | List the active agents in your AxioRank workspace (id, name, labels, quarantine + last-used status). Use this to find an agent's id before calling agent-specific tools. Requires the `agents:read` scop | typed |
axiorank_get_agent | Fetch one agent's posture (quarantine state, labels, last-used, revocation) by id, scoped to your workspace. Requires the `agents:read` scope. | typed |
axiorank_quarantine_agent | Reversible kill switch: quarantine an agent so the gateway DENIES all of its tool calls, or release it. Set `quarantine: false` to restore. Requires the `agents:write` scope. | typed |
axiorank_revoke_agent | Permanently revoke an agent: its API keys stop authenticating immediately (incident response). Irreversible. Issue a new agent to restore access. Its audit history is kept. Requires the `agents:write` | typed |
axiorank_list_policies | List the outbound governance policies in your workspace (enabled or not), each with its tool pattern, action (allow/deny/require_approval/redact), risk threshold, priority and enabled flag. Requires t | typed |
axiorank_get_policy | Fetch one outbound policy by id, scoped to your workspace. Requires the `policies:read` scope. | typed |
axiorank_create_policy | Create an outbound governance policy. It is created DISABLED so an LLM can never arm enforcement unattended. Review it (axiorank_get_policy) then enable it with axiorank_update_policy. `toolPattern` i | incomplete |
axiorank_search_audit_logs | Search your workspace's governance audit trail, newest first, with filters: decision (allow/deny/hold), source (sdk/mcp), agentId, tool name (substring), minimum risk, and a time window (ISO `from`/`t | typed |
axiorank_list_incidents | List security alerts/incidents in your workspace, newest first, filterable by status (open/acknowledged/resolved/suppressed), severity (low/medium/high/critical) and kind (high_risk/anomaly/auto_respo | typed |
axiorank_get_incident | Fetch the kill-chain finding behind an alert (the multi-step attack pattern, severity, and the contributing tool-call ids) by alert id. Returns null evidence for a non-kill-chain alert. Requires the ` | typed |
axiorank_list_threat_intel | List external identities (card hosts/keys) flagged across the AxioRank network, with k-anonymity-gated aggregate counts (workspaces, sightings, deny/review, max risk). This is the shared cross-tenant | typed |
axiorank_list_ml_assessments | List your workspace's most recent ML/LLM threat assessments (model verdict, threat class, confidence, recommendation) for tool calls and cards. Requires the `logs:read` scope. | typed |
axiorank_get_usage | Report this billing period's usage for your workspace: plan tier, governed events used vs the monthly limit, and ML assessments used. Requires the `logs:read` scope. | typed |
axiorank_issue_token | Mint a short-lived, scoped `axr_tok_…` access token for an existing agent. This is the Zero-Trust credential the agent sends as `Authorization: Bearer <token>`. It expires within the hour and cannot b | typed |
axiorank_create_agent | Create a new agent in your workspace and return a SHORT-LIVED bootstrap token to start using it immediately (no durable secret is emitted). For long-term auth, add a static key or a federation binding | typed |
axiorank_author_detector | Describe a risk in plain English and AxioRank's AI proposes a custom content detector (regex or keyword) and SAVES it DISABLED for your review. An LLM never arms detection unattended. Outbound content | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/com-axiorank-axiorank)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.