Loading…
Agent runtime platform for running 150+ AI applications across image, video, audio, LLMs, and 3D.
Do not connect
The assessed surface is high-risk. Remediate the findings before connecting.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The inference.sh MCP server exposes 25 tools, focused primarily on general-purpose capabilities. Its published description reads: "Agent runtime platform for running 150+ AI applications across image, video, audio, LLMs, and 3D". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates inference.sh D — the assessed surface is high-risk and should be remediated before use. Its most notable findings include "Cross-tool shadowing" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check inference.sh's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add inference.sh to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://api.inference.sh/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Get detailed app info including input/output schemas and version history
Search and filter available apps on inference.sh
Run an app on inference.sh. Creates a task that executes the app with the given input.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: mcp_run
A tool description tries to alter the model’s use of another tool.
ected first via mcp_connect.RecommendationDescriptions must describe only their own tool.
tool: task_cancel
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
tool: (server instructions)
A tool description tries to alter the model’s use of another tool.
Apps: app_list, app_get, app_run, task_get, task_list, task_logs, task_RecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: knowledge_delete
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
tool: mcp_disconnect
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
tool: task_cancel
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
Financial data service providing fundamental information for 30,000+ listed companies across the US, Japan, and Korea, sourced directly from SEC, EDINET, and DART regulatory filings.
Search tours, attraction tickets, and holiday packages across 24 countries.
Agentic visitor analytics with five tools for CRO and session analysis.
52 paid x402 API endpoints for AI agents — crypto, data, DeFi, and market intelligence, settled on Base.
Access Vonage API documentation, code snippets, tutorials, and troubleshooting resources.
Create a new knowledge entry (concept, observation, preference, reference, etc.)
Delete a knowledge entry by ID
Get detailed information about a knowledge entry by namespace/name or ID
List your knowledge entries, optionally filtered by type
Search your knowledge entries by query
Initiate a connection to an MCP server. For OAuth servers, returns an authorization URL to open in a browser.
Remove connection to an MCP server
Get details about an MCP server including connection status
Browse available MCP servers that can be connected to
Call a tool on a connected MCP server. The server must be connected first via mcp_connect.
Search available MCP servers by query
List available tools on a connected MCP server, or get details for a specific tool
List supplementary files for a skill (references, scripts, etc.)
Search the public skill store
Browse approved skills in the public skill store
Create or update a skill with SKILL.md content and optional supporting files
Fetch a skill's assembled SKILL.md content. Tries the inference.sh store first, falls back to GitHub. Returns the full skill content for the agent to consume.
View a specific supplementary file from a skill's manifest
Cancel a running or queued task
Get status and output of a task
List your tasks on inference.sh
Get execution logs for a task