Enterprise AI governance control plane with spend tracking, guardrails, policy enforcement, and compliance monitoring.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 25 days ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The ThinkNEO Control Plane MCP server exposes 68 tools, focused primarily on general-purpose capabilities. Its published description reads: "Enterprise AI governance control plane with spend tracking, guardrails, policy enforcement, and compliance monitoring". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates ThinkNEO Control Plane F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Unguarded destructive tools" and "Data-exfiltration parameters". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check ThinkNEO Control Plane's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add ThinkNEO Control Plane to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.thinkneo.ai/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Check AI spend summary for a workspace, team, or project. Returns real cost breakdown by provider, model, and time period from the ThinkNEO AI gateway.
Run a governed LLM completion through the ThinkNEO AI gateway. The request is authorized, classified, and policy-checked against your workspace governance BEFORE any provider is called — a blocked pro
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: thinkneo_write_memory
Tools that execute commands / write files / make arbitrary requests are exposed without annotations or guards.
down content to write to the file.","title":"Content","type":"string"}},"requiredRecommendationAnnotate destructive tools and require human approval.
tool: thinkneo_schedule_demo
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "context"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: thinkneo_get_trust_badge
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
badge by report token. Returns the organization name, score, badge leRecommendationRemove side-channel parameters; constrain tool inputs.
tool: thinkneo_registry_publish
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "endpoint_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: thinkneo_start_trace
A tool description tries to alter the model’s use of another tool.
_id to use with thinkneo_log_event and thinkneo_end_trace. Requires authenticationRecommendationDescriptions must describe only their own tool.
tool: thinkneo_set_baseline
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "notes"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: thinkneo_log_risk_avoidance
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
risk. Examples: PII leak blocked (est. $50K GDPR fine), prompt injeRecommendationRemove side-channel parameters; constrain tool inputs.
tool: thinkneo_alert_rule_test
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
quires an admin API key. {"properties":{"rule_id":{"description":"The rRecommendationRemove side-channel parameters; constrain tool inputs.
tool: (server instructions)
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
cts injection & PII [free] - thinkneo_usage: Your usage stats — calRecommendationRemove side-channel parameters; constrain tool inputs.
tool: (server instructions)
A tool description tries to alter the model’s use of another tool.
, cost [free] - thinkneo_check_spend: AI cost breakdown by provider/model/team [authRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: thinkneo_complete
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: thinkneo_schedule_demo
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: thinkneo_registry_publish
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: thinkneo_rotate_key
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
tool: thinkneo_alert_rule_delete
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
tool: (server instructions)
The description pairs a fetch imperative with a hardcoded external URL, letting the server relocate its real instructions off-metadata and mutate them after review. Fires only when a fetch verb and a URL co-occur, so benign documentation links do not.
API key, visit https://thinkneo.ai/pricing Visit https://thinkneo.ai or contact hello@thinRecommendationDo not direct the model to fetch and act on external URLs; treat linked content as untrusted.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Read Claude Code project memory files. Without arguments, returns the MEMORY.md index listing all available memories. With a filename argument, returns the full content of that specific memory file. U
Write or update a Claude Code project memory file (.md). Persists project context, user preferences, feedback, and reference notes across Claude Code sessions. Filename must end in .md with lowercase
Evaluate a prompt or text against ThinkNEO guardrail policies before sending it to an AI provider. Returns risk assessment, violations found, and recommendations. Requires authentication.
Free-tier prompt safety check. Analyzes text for prompt injection patterns and PII (credit card numbers, Brazilian CPF, US SSN, email, phone, passwords). Returns a safety assessment with specific warn
Check AI governance policies including model access, budget limits, data controls, and agent governance from the ThinkNEO gateway.
Check AI budget status including spend vs limit, forecast, and chargeback data from the ThinkNEO gateway.
List active alerts for budget, policy, SLA, and security from the ThinkNEO gateway.
Get compliance status including framework coverage (EU AI Act, ISO 42001, NIST AI RMF, SOC 2) and governance assessments from the ThinkNEO gateway.
Get real-time health and performance status of AI providers routed through the ThinkNEO gateway. Shows latency, error rates, and availability. No authentication required.
Schedule a demo or discovery call with the ThinkNEO team. Collects contact information and preferences. No authentication required.
Returns usage statistics for your ThinkNEO API key. Shows calls today, this week, this month, monthly limit, remaining calls, top tools used, estimated cost, and current tier. Works without authentica
AI Smart Router — find the cheapest model that meets your quality threshold. Specify your task type and quality requirements, and ThinkNEO will recommend the optimal model with estimated cost and savi
Get your AI cost savings report. Shows total requests routed, original cost (what you'd have paid with premium models), actual cost, total savings, savings percentage, breakdown by task type, and mode
Simulate how much your organization would save on AI costs using ThinkNEO Smart Router. Enter your current monthly AI spend and primary model, and see estimated monthly and annual savings with a recom
Evaluate your organization AI Trust Score (0-100) across 10 dimensions: Guardrails, PII Protection, Injection Defense, Audit Trail, Compliance, Model Governance, Cost Controls, Outcome Validation, Obs
Get a public AI Trust Score badge by report token. Returns the organization name, score, badge level, and validity period. Use the badge URL to embed the trust badge in websites and documentation. No
Search the ThinkNEO MCP Marketplace — the npm for MCP tools. Discover MCP servers and tools by keyword, category, rating, or verified status. Returns name, description, tools count, rating, downloads,
Get full details for an MCP server package from the ThinkNEO Marketplace. Returns readme, full tools list, version history, reviews, security score, and installation instructions. No authentication re
Publish an MCP server to the ThinkNEO Marketplace. Validates the endpoint by calling initialize and tools/list, runs automated security scan for secrets and injection patterns, computes a security sco
Rate and review an MCP server in the ThinkNEO Marketplace. One review per user per package (updates on repeat). Rating from 1 (poor) to 5 (excellent) with optional comment. Reviews affect the package
Get installation config for an MCP server from the ThinkNEO Marketplace. Returns ready-to-use JSON config for Claude Desktop, Cursor, Windsurf, or custom clients. Tracks the download. No authenticatio
Bridge MCP tool registry to A2A format. Shows tool-to-skill mappings.
Bridge A2A agents to MCP tool format.
Generate an A2A Agent Card from registry data.
List all MCP <-> A2A bridge mappings for a tenant.
Start a new agent observability trace. Creates a session that tracks all tool calls, model calls, decisions, and errors for an AI agent run. Returns a session_id to use with thinkneo_log_event and thi
Log an event within an active agent trace. Supports event types: tool_call, model_call, decision, error, pii_access, guardrail_triggered. Returns event_id and running session cost. Requires authentica
End an active agent trace and get the session summary. Returns total cost, duration, tool/model call counts, and event count. Triggers post-session anomaly detection (cost spikes, error rate). Require
Retrieve the full trace for an agent session. Returns the complete timeline of events (tool calls, model calls, decisions, errors), session metadata, total cost, duration, and any alerts triggered. Re
Get the agent observability dashboard — aggregated metrics for your AI agents. Includes total sessions, events, cost, error rate, latency, top agents, top tools, active alerts, and cost trend over tim
Define the pre-AI cost baseline for a business process. Example: 'customer_support_ticket costs $12 per ticket and takes 15 minutes without AI'. This baseline is used to calculate ROI when agents hand
Log a business decision made by an AI agent. Tracks the AI cost and the business value generated. If a baseline exists for the process, value is auto-calculated from the baseline cost. Example: agent
Log a risk event that was blocked or avoided by the governance layer. Quantifies the estimated dollar impact of the avoided risk. Examples: PII leak blocked (est. $50K GDPR fine), prompt injection pre
Analyze cost-per-decision for AI agents. Shows the actual AI cost for each decision, compared to the pre-AI baseline. Answers: 'How much does each AI decision cost?' and 'How does it compare to doing
Calculate ROI per AI agent. Shows value generated vs AI cost consumed, with daily trend, success rate, and comparison to pre-AI baseline. Answers: 'Is this agent generating or consuming value?' and 'W
Executive business impact dashboard. Returns a single view of: total value generated by AI agents, total AI cost, net ROI, risk avoided in dollars, cost per decision, top performing agents, and risk e
Retrieve A2A (agent-to-agent) interaction logs from the live gateway. Shows which agents called which, actions performed, costs, and outcomes.
Retrieve A2A interaction policies from the live gateway. Shows allowed actions, rate limits, cost caps, and approval requirements.
Visualize agent-to-agent communication flow. Shows registered agents, their approval status, and interaction patterns from the live gateway.
Retrieve immutable audit trail for A2A interactions with hash verification. Each event is cryptographically chained for tamper detection.
Detect waste and inefficiency in AI operations. Analyzes agent performance, A2A communication overhead, error costs, unused capacity, and cost outliers. Returns specific actionable findings like 'you
Register an action claim from an AI agent. The agent declares it performed an action (e.g., sent an email, created a PR, wrote a file) and ThinkNEO will verify it actually happened. Returns a claim_id
Trigger verification of a registered action claim. Runs the appropriate verification adapter (HTTP check, file check, database check, etc.) and returns the result with evidence. If already verified, r
Retrieve the immutable proof record for a verified claim. Includes the original claim, verification evidence, verifier identity, and a SHA-256 proof hash for tamper detection. This is the 'proof' in '
Aggregated outcome verification metrics — verification rates, failure patterns, agent reliability rankings, and daily trends. Shows how reliably your AI agents are delivering verified outcomes. 'Datad
View the outcome benchmark matrix — real quality scores per provider/model/task_type based on verified outcomes, not static estimates. Shows verification rates, sample counts, and rankings. Requires a
Compare providers side-by-side for a specific task type. Shows quality scores, verification rates, and rankings based on real outcomes. Requires authentication.
Explain why the Smart Router would choose a specific model for a task type. Shows both benchmark-based (real outcomes) and static quality estimates, and explains the reasoning behind the recommendatio
Generate a compliance report for regulatory frameworks (EU AI Act, ISO 42001, SOC2, NIST). Exports from live audit data.
Define or update an SLA (Service Level Agreement) for an AI agent. Set accuracy, quality, cost, safety, or latency thresholds with automatic breach detection and configurable actions (alert, escalate,
Check current SLA status for all agents or a specific agent. Shows actual metric values vs thresholds, healthy/breached status, and error budget remaining. Automatically records breaches. Requires aut
View SLA breach history — which SLAs were breached, by which agents, actual vs threshold values, and resolution status. Requires authentication.
SLA overview dashboard — all agents, current status, error budgets, and recent breaches (7d). The SRE dashboard for AI agents. Requires authentication.
Export audit events from the live gateway. Supports JSON and CSV formats with date range filtering for SIEM integration.
Compare available AI models from the live gateway catalog.
Estimate token count for text (chars/4 approximation).
Analyze prompt and suggest optimizations with live metrics context.
Instruct the gateway to rotate an API key.
Check connector grants and secrets status from the gateway.
Get semantic cache stats from the live gateway runtime metrics.
Detect prompt injection attempts in text using guardrail patterns. Also retrieves live guardrails_blocked stats from the gateway.
Detect international PII across 30+ document types from 15+ countries: Brazil (CPF, CNPJ, RG, PIS), USA (SSN, EIN, ITIN, Passport), UK (NINO, UTR), Canada (SIN), EU (IBAN, VAT), Germany (Tax-ID), Fran
List your configurable Monitor Agent alert rules. Each rule watches a metric (e.g. an API key reaching a % of its budget, workspace spend, error rate) and notifies your channels (email/discord/whatsap
Create a Monitor Agent alert rule. Example: notify by email when API key 'X' reaches 75% of its budget → metric=key_spend_pct_of_budget, operator=gte, threshold=75, scope_value=<api_key_id>, budget_us
Delete a Monitor Agent alert rule by its rule_id. Requires an admin API key.
Send a test notification through a rule's configured channels to confirm delivery (email/discord/whatsapp). Requires an admin API key.