Connect AxioRank: Zero-Trust for AI Agents and your agent gets 22 tools, among them axiorank_author_detector, axiorank_check_approval, axiorank_create_agent. It answers at https://app.axiorank.com/api/mcp-server/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 10 of 10 times since 4 September 2026; the last check, on 18 October 2026, succeeded.
Zero-trust gateway for AI agents: score tool calls, verify agent cards, enforce policy, audit.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
axiorank_author_detector | Describe a risk in plain English and AxioRank's AI proposes a custom content detector (regex or keyword) and SAVES it DISABLED for your review. An LLM never arms detection unattended. Outbound content categories only (secret/pii/destructive Inputs: description |
axiorank_check_approval | Poll the verdict of a held (`hold`) tool call. Pass the `approvalId` returned by `axiorank_score_tool_call`. Blocks briefly server-side and returns as soon as an operator approves/denies; otherwise returns the still-`pending` status so you Inputs: approvalId |
axiorank_create_agent | Create a new agent in your workspace and return a SHORT-LIVED bootstrap token to start using it immediately (no durable secret is emitted). For long-term auth, add a static key or a federation binding in the dashboard. Requires the `agents: Inputs: name, description, labels, tokenScopes, ttlSeconds |
axiorank_create_policy | Create an outbound governance policy. It is created DISABLED so an LLM can never arm enforcement unattended. Review it (axiorank_get_policy) then enable it with axiorank_update_policy. `toolPattern` is a glob over tool names; `action` is al Inputs: name, toolPattern, action, riskThreshold, signalCategory, context |
axiorank_get_agent | Fetch one agent's posture (quarantine state, labels, last-used, revocation) by id, scoped to your workspace. Requires the `agents:read` scope. Inputs: agentId |
axiorank_get_health | Liveness/readiness probe for the AxioRank control plane (API + database reachability). Returns `status: ok|degraded`. |
axiorank_get_incident | Fetch the kill-chain finding behind an alert (the multi-step attack pattern, severity, and the contributing tool-call ids) by alert id. Returns null evidence for a non-kill-chain alert. Requires the `logs:read` scope. Inputs: alertId |
axiorank_get_policy | Fetch one outbound policy by id, scoped to your workspace. Requires the `policies:read` scope. Inputs: policyId |
axiorank_get_protocol_coverage | List the agent-interop protocols AxioRank can govern (A2A, MCP, OAuth, x402, DIDs, robots.txt/llms.txt, AP2, …), grouped into six planes, each with coverage status (live/beta/planned) and direction (inbound/outbound/both). Use this to disco |
axiorank_get_usage | Report this billing period's usage for your workspace: plan tier, governed events used vs the monthly limit, and ML assessments used. Requires the `logs:read` scope. |
axiorank_issue_token | Mint a short-lived, scoped `axr_tok_…` access token for an existing agent. This is the Zero-Trust credential the agent sends as `Authorization: Bearer <token>`. It expires within the hour and cannot be replayed afterwards. Durable static ke Inputs: agentId, scopes, ttlSeconds |
axiorank_list_agents | List the active agents in your AxioRank workspace (id, name, labels, quarantine + last-used status). Use this to find an agent's id before calling agent-specific tools. Requires the `agents:read` scope. |
axiorank_list_incidents | List security alerts/incidents in your workspace, newest first, filterable by status (open/acknowledged/resolved/suppressed), severity (low/medium/high/critical) and kind (high_risk/anomaly/auto_response/kill_chain/ml_threat). Requires the Inputs: status, severity, kind, limit |
axiorank_list_ml_assessments | List your workspace's most recent ML/LLM threat assessments (model verdict, threat class, confidence, recommendation) for tool calls and cards. Requires the `logs:read` scope. Inputs: limit |
axiorank_list_policies | List the outbound governance policies in your workspace (enabled or not), each with its tool pattern, action (allow/deny/require_approval/redact), risk threshold, priority and enabled flag. Requires the `policies:read` scope. |
axiorank_list_threat_intel | List external identities (card hosts/keys) flagged across the AxioRank network, with k-anonymity-gated aggregate counts (workspaces, sightings, deny/review, max risk). This is the shared cross-tenant feed, not your private data. Requires th |
axiorank_quarantine_agent | Reversible kill switch: quarantine an agent so the gateway DENIES all of its tool calls, or release it. Set `quarantine: false` to restore. Requires the `agents:write` scope. Inputs: agentId, quarantine |
axiorank_revoke_agent | Permanently revoke an agent: its API keys stop authenticating immediately (incident response). Irreversible. Issue a new agent to restore access. Its audit history is kept. Requires the `agents:write` scope. Prefer `axiorank_quarantine_agen Inputs: agentId |
axiorank_score_tool_call | Inspect a proposed agent tool call BEFORE executing it. AxioRank scores its risk (0–100), runs content inspection (secrets, PII, destructive ops, prompt-injection, egress), applies your policies, records an audit log, and returns a decision Inputs: tool, arguments, phase, resultText, promptText, completionText |
axiorank_search_audit_logs | Search your workspace's governance audit trail, newest first, with filters: decision (allow/deny/hold), source (sdk/mcp), agentId, tool name (substring), minimum risk, and a time window (ISO `from`/`to`). Payloads are already secret-redacte Inputs: decision, source, agentId, tool, minRisk, from |
axiorank_update_policy | Update an existing policy: enable/disable it, rename it, or change its priority. (Other fields are edited in the dashboard.) Requires the `policies:write` scope. Inputs: policyId, enabled, name, priority |
axiorank_verify_card | Vet a remote agent or tool's identity card (A2A Agent Card, MCP server card, OAuth metadata, x402, …) BEFORE connecting to it. Supply EITHER `url` (AxioRank fetches the card) OR an inline `document`. AxioRank verifies signatures, scores sup Inputs: url, document, protocol |
Every block below points at https://app.axiorank.com/api/mcp-server/mcp. Pick your client and copy.
claude mcp add --transport http axiorank-zero-trust-for-ai-agent https://app.axiorank.com/api/mcp-server/mcp
{
"mcpServers": {
"axiorank-zero-trust-for-ai-agent": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://app.axiorank.com/api/mcp-server/mcp"]
}
}
}{
"mcpServers": {
"axiorank-zero-trust-for-ai-agent": {
"url": "https://app.axiorank.com/api/mcp-server/mcp"
}
}
}{
"servers": {
"axiorank-zero-trust-for-ai-agent": {
"type": "http",
"url": "https://app.axiorank.com/api/mcp-server/mcp"
}
}
}{
"context_servers": {
"axiorank-zero-trust-for-ai-agent": {
"url": "https://app.axiorank.com/api/mcp-server/mcp"
}
}
}{
"mcpServers": {
"axiorank-zero-trust-for-ai-agent": {
"serverUrl": "https://app.axiorank.com/api/mcp-server/mcp"
}
}
}{
"mcpServers": {
"axiorank-zero-trust-for-ai-agent": {
"url": "https://app.axiorank.com/api/mcp-server/mcp"
}
}
}name: AxioRank: Zero-Trust for AI Agents
version: 0.0.1
schema: v1
mcpServers:
- name: AxioRank: Zero-Trust for AI Agents
type: streamable-http
url: https://app.axiorank.com/api/mcp-server/mcp{
"mcpServers": {
"axiorank-zero-trust-for-ai-agent": {
"httpUrl": "https://app.axiorank.com/api/mcp-server/mcp"
}
}
}{
"mcpServers": {
"axiorank-zero-trust-for-ai-agent": {
"type": "http",
"url": "https://app.axiorank.com/api/mcp-server/mcp"
}
}
}{
"mcpServers": {
"axiorank-zero-trust-for-ai-agent": {
"url": "https://app.axiorank.com/api/mcp-server/mcp"
}
}
}goose://extension?url=https%3A%2F%2Fapp.axiorank.com%2Fapi%2Fmcp-server%2Fmcp&type=streamable_http&id=axiorank-zero-trust-for-ai-agent&name=AxioRank%3A%20Zero-Trust%20for%20AI%20Agents
It answered our last check on 18 October 2026 in 230 ms. Over 10 checks since 4 September 2026 it answered 10. Status here comes from Neuronto's own probes, not from the publisher.
Yes. It is published by axiorank.com and served from app.axiorank.com, the vendor's own domain: https://app.axiorank.com/api/mcp-server/mcp.
22, as returned by the server's own tools/list on 10 September 2026: axiorank_author_detector, axiorank_check_approval, axiorank_create_agent, axiorank_create_policy, axiorank_get_agent, axiorank_get_health, axiorank_get_incident, axiorank_get_policy, and 14 more.
It answered our last check on 18 October 2026 in 230 ms. Over 10 checks since 4 September 2026 it answered 10.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://app.axiorank.com/api/mcp-server/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: com.axiorank. Endpoint host: app.axiorank.com. ARD identifier: urn:air:com.axiorank:mcp:axiorank.
First indexed 31 August 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.