Shadow AI List

Installation

Use a remote MCP client and point it at https://ailist.airiskmanagement.ca/mcp.

Configuration

• Transport: Streamable HTTP (JSON-RPC 2.0)
• Authentication: none
• Coverage: free top 100 of the registry

Capabilities

• lookup_ai_tool_risk: look up an AI tool by name, vendor, or domain and return its risk score, risk band, category, and whether it trains on user data
• check_domain_against_registry: check whether a domain or subdomain belongs to a known AI tool
• list_shadow_ai: list AI tools from the registry, optionally filtered by category
• get_top_risky_ai: get the highest-risk AI tools by AI Exposure Index risk score

Limitations

• Read-only connector
• No account required
• Coverage is limited to the free top 100
• Plain GET requests return 405 by design