Security & Testing
airiskmanagement.ca
Provides risk assessment and monitoring of AI tools, including risk scores, domain verification, and listings.
ENDPOINT 1
https://ailist.airiskmanagement.ca/mcp
MCP server metadata
- Name
- shadow-ai-list
- Version
- 1.0.0
Shadow AI List is a maintained, risk-ranked registry of AI tools (the 'AI Exposure Index'). Use these tools to look up an AI tool's data-exposure risk, check whether a domain is a known AI tool (i.e. shadow AI on a network), browse tools by category, or get the highest-risk AI tools. Coverage is the free top 100 of the registry.
Known tools 4
lookup_ai_tool_riskLook up an AI tool by name, vendor, or domain and return its AI Exposure Index risk score, risk band, category, and whether it trains on user data.
Inferred read-onlycheck_domain_against_registryCheck whether a domain or subdomain belongs to a known AI tool - i.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.shadow-ai-list]
url = "https://ailist.airiskmanagement.ca/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"shadow-ai-list": {
"type": "http",
"url": "https://ailist.airiskmanagement.ca/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: shadow-ai-list
Remote MCP URL: https://ailist.airiskmanagement.ca/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"shadow-ai-list": {
"url": "https://ailist.airiskmanagement.ca/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"shadow-ai-list": {
"type": "http",
"url": "https://ailist.airiskmanagement.ca/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "shadow-ai-list",
"transport": "streamable-http",
"url": "https://ailist.airiskmanagement.ca/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Trust Data Available
BuiltWith Trust API v2 evidence for airiskmanagement.ca was fetched 2026-07-28T02:01:02.978Z and is being refreshed.
airiskmanagement.ca is assessed as Trusted: Domain runs a meaningful technology spend, consistent with a real business.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.