Skip to content
Risk checklist

Review high-risk tools before AI agents use them.

Agent-facing tools need stricter review than normal developer APIs. This checklist focuses on actions where an agent mistake can move money, delete data, expose private information or affect users.

Scan OpenAPIScan MCP tools

High-risk action types

  • Refunds, payments and financial adjustments.
  • Deletes, cancellations and irreversible changes.
  • Emails, notifications and external messages.
  • Publishing, posting and public changes.
  • Customer, employee or account data exports.
  • Admin actions and permission changes.

Minimum checks

  • Does the tool require explicit confirmation?
  • Are amounts, dates, limits and IDs bounded?
  • Are closed fields represented as enums?
  • Does the description explain unsafe use?
  • Do errors tell the agent when to stop?
  • Can success be verified without guessing?

How AgentReady helps

TimeProofs AgentReady converts these patterns into a score, severity counts, findings and recommended fixes for OpenAPI and MCP tool definitions.

Limit

TimeProofs AgentReady does not guarantee that an AI agent will never fail. It identifies structural risks that may cause AI agents to misuse APIs, tools or MCP servers.

AgentReady at a glance

The AI agent tool risk checklist helps teams review operations where an agent mistake could move money, delete data, expose private information or affect users. AgentReady is a product and candidate open standard for static pre-deployment analysis. It is not a runtime firewall, independent certification, official standards-body standard or guaranteed-safety system.

Community
AgentReady Community is free and available for local browser, CLI and GitHub Action use.
Pro
AgentReady Pro is planned and not purchasable.
Language
English is the current canonical language. No translated alternate route is published for this page.
Boundary
The page explains static analysis and pre-deployment review, not runtime protection or certification.
Sources

AGENTREADY_RULE_CODES.mdLEGAL_IP_AND_LIABILITY_STRATEGY.mdAGENTREADY_MASTER_PLAN.mdSEO_GEO_AI_FIRST_REQUIREMENTS.mdGLOBAL_STANDARD_SITE_PROGRAM.md