MCP Server for Z.AI - A Model Context Protocol server that provides AI capabilities
Nothing to run from here
InterAI Risk Oracle is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
9
tools declared
—
trust score
remote
at its publisher
—
calls last 7d
What it does
Pre-execution policy gate for consequential agent actions with durable trust receipts.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http interai-risk-oracle-mcp https://api.interailabs.dev/mcp
# 2 — ask your agent for something these tools do
# oracle.verify_autonomous_action, oracle.verify_response, oracle.verify_batch and 6 more
InterAI Risk Oracle costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
INAll 1 server
InterAILabs1 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
Claude Codedeclared by this listing
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http interai-risk-oracle-mcp https://api.interailabs.dev/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
What you approve
9 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Primary tool for one concrete proposed autonomous action before it executes. This authenticated prepaid verification may consume account balance and records a signed trust receipt; InterAI evaluates the proposal but does not execute or modify the proposed external action. Reuse idempotency_key only when retrying the same logical request to avoid duplicate billing. Returns allow, review_required, o
| Parameter | Type | Required | Notes |
|---|---|---|---|
| use_case | string | yes | Stable identifier describing why the exact autonomous action is being proposed. Required together with action for the autonomous_execution contract. |
| action | object | yes | The proposed action. For executable pilot authorization use interai-canonical-action/v1 with host-registry tool_id, type, operation, exact arguments, and explicit side-effect semantics. |
| execution_context | object | no | Host-attested execution context bound to a canonical action. InterAI authenticates the account, not the truth of host-provided workspace, actor, run, or environment values. |
| authorization_ttl_seconds | integer | no | Lifetime of a single-use execution authorization for a canonical action. Only Bearer-authenticated pilot requests receive executable authorization material. |
| context | object | no | Optional runtime context surrounding the proposed action, such as environment, agent identity, counterparty, user confirmation, or other facts relevant to this decision. |
| policy | object | no | Optional strictly validated caller-scoped restrictions. They may tighten the boundary but cannot weaken host or account policy. |
| external_evidence | array | no | Optional signed or verifiable external assertions. Current Stage 2 evidence is parsed, verified, bound, and recorded as non-authoritative evidence; it does not directly determine the InterAI execution |
| domain | string | no | Optional domain label used to provide verification context. It does not replace the exact action, context, or policy inputs. |
| mode | string | no | Verification mode. Use fast_heuristic for the default low-latency path or semantic_judge when a semantic model judgment is explicitly required. |
| idempotency_key | string | no | Stable caller-provided key for retrying the same billed verification without duplicating the economic operation. Reuse it only for the same logical request. |
Legacy compatibility entry point for existing clients. This authenticated prepaid verification may consume account balance and records a trust receipt, but it does not execute any proposed external action. Supply exactly one contract: prompt + response, or use_case + action; never mix them. Reuse idempotency_key only for the same logical retry. For new action preflight use oracle.verify_autonomous
| Parameter | Type | Required | Notes |
|---|---|---|---|
| prompt | string | no | Legacy compatibility input: the original prompt whose response is being verified. Use together with response, not with autonomous action fields. |
| response | string | no | Legacy compatibility input: the response to evaluate against prompt. Use together with prompt, not with autonomous action fields. |
| use_case | string | no | Stable identifier describing why the exact autonomous action is being proposed. Required together with action for the autonomous_execution contract. |
| action | object | no | The proposed action. For executable pilot authorization use interai-canonical-action/v1 with host-registry tool_id, type, operation, exact arguments, and explicit side-effect semantics. |
| execution_context | object | no | Host-attested execution context bound to a canonical action. InterAI authenticates the account, not the truth of host-provided workspace, actor, run, or environment values. |
| authorization_ttl_seconds | integer | no | Lifetime of a single-use execution authorization for a canonical action. Only Bearer-authenticated pilot requests receive executable authorization material. |
| context | object | no | Optional runtime context surrounding the proposed action, such as environment, agent identity, counterparty, user confirmation, or other facts relevant to this decision. |
| policy | object | no | Optional strictly validated caller-scoped restrictions. They may tighten the boundary but cannot weaken host or account policy. |
| external_evidence | array | no | Optional signed or verifiable external assertions. Current Stage 2 evidence is parsed, verified, bound, and recorded as non-authoritative evidence; it does not directly determine the InterAI execution |
| domain | string | no | Optional domain label used to provide verification context. It does not replace the exact action, context, or policy inputs. |
| mode | string | no | Verification mode. Use fast_heuristic for the default low-latency path or semantic_judge when a semantic model judgment is explicitly required. |
| idempotency_key | string | no | Stable caller-provided key for retrying the same billed verification without duplicating the economic operation. Reuse it only for the same logical request. |
Use for multiple independent legacy or autonomous verification items in one authenticated prepaid call (1 to 100). The batch may consume account balance and records one trust receipt per item; InterAI does not execute any proposed external action. Reuse idempotency_key only for the same logical batch retry. For one proposed action, use oracle.verify_autonomous_action instead.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| items | array | yes | Independent verification items. Each item must contain either prompt + response or use_case + action; 1 to 100 items are accepted. |
| idempotency_key | string | no | Stable caller-provided key for retrying the same billed verification without duplicating the economic operation. Reuse it only for the same logical request. |
Read-only public metadata for costs, trial availability, idempotency, and top-up or payment paths. Use it before budgeting or onboarding; it does not evaluate risk or create a trust receipt.
No parameter schema on file.
Read-only bootstrap or handoff bundle with service identity, interfaces, runtime mode, contracts, schemas, and sample payloads in one response. Use it for complete integration context; use oracle.service_descriptor for focused service metadata, oracle.agent_card for A2A capabilities, or oracle.get_pricing for costs.
No parameter schema on file.
Read-only general service descriptor with identity, endpoints, billing, trust, and supported agent protocols. Use it to inspect service-level integration metadata; use oracle.agent_card for A2A skills or oracle.discovery_bundle for the complete bootstrap package.
No parameter schema on file.
Read-only A2A Agent Card with agent identity, security scheme, capabilities, and skills. Use it when selecting or integrating InterAI through A2A; use oracle.service_descriptor for general service metadata or oracle.discovery_bundle for complete bootstrap context.
No parameter schema on file.
Read-only lookup of the canonical public representation and signature metadata for a trust receipt that already exists. Supply receipt_id. It does not create or re-run a decision; use oracle.verify_trust_receipt_signature when the goal is signature validation.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| receipt_id | string | yes | Identifier of the existing InterAI trust receipt whose canonical public representation and signature metadata should be returned. |
Read-only service-side validation of a trust receipt that already exists. Supply signature plus either receipt_id for the canonical server-stored receipt or a caller-supplied receipt object. Returns valid true or false when signing is enabled. Current signatures use HMAC-SHA256 and are service-verifiable by InterAI, not independent offline public-key proofs. It does not evaluate risk or create a r
| Parameter | Type | Required | Notes |
|---|---|---|---|
| receipt | object | no | Optional caller-supplied receipt object, typically evidence received from another agent or system. Either receipt or receipt_id is required. |
| receipt_id | string | no | Optional ID of an existing InterAI trust receipt. InterAI resolves the canonical server-stored record before validating the supplied signature. Either receipt_id or receipt is required. |
| signed_payload | string | no | Optional exact serialized payload that was signed. Supply it when validating externally transported receipt evidence that includes the original signed payload. |
| signature | string | yes | HMAC-SHA256 signature to validate against the referenced InterAI receipt. Required. |
| signature_alg | string | no | Optional signature algorithm declaration. The current supported value is hmac-sha256. |
Free
$0 forever
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install InterAI Risk Oracle or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
—Grade not published
No rule-by-rule report on file for this release
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
This listing is an address its publisher runs, and you connect to it directly — this marketplace is not in the path. The scanner reads packages and public source, and an address is neither: the repository linked on this page is where this record was collected from, not a copy of what the address serves, so it is not graded in its place. So there is no grade — not a withheld one, an unmeasured one.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 0.1.3-beta.
0.1.3-beta
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish InterAI Risk Oracle can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.