Risk Scorer

Score MCP tools 0–100 based on capability risk — analyzes inputSchema structure, not descriptions. 100% client-side.

Zero data sent

Works offline

<5ms per tool

Input — MCP tools JSON

Load example:

Ctrl + Enter to score

Risk scorer

Analyzes inputSchema structure to produce a 0–100 risk score. Signals include shell execution params (+40), file write combinations (+35), credentials in schema (+30), arbitrary network calls (+25), and 9 more checks.

Scoring bands

0–25 Low · 26–50 Medium · 51–75 High · 76–100 Critical. Each signal includes point values and remediation hints.

What to paste

A JSON tools[] array, a single tool object, or a full MCP server config. ShapeMCP's converters output directly compatible JSON.

Privacy

All scoring runs as pure JavaScript in your browser. No JSON, no tool definitions, no results are sent to any server. Works fully offline.