Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions
Directory / Distributed Risk desk
Distributed Risk desk
by distributedrisk.com · https://www.distributedrisk.com/mcp
Read the Distributed Risk desk notes and the official US record they cite.
12 of 12 checks · 30 Oct 2026
Is Distributed Risk desk MCP server safe?
- No hidden instructions were found in its tool descriptions.
- Its error messages showed no secrets or internal details.
- All 14 of its tools are labeled read-only.
- Overall it scored 89/100 on 30 Oct 2026.
A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.
What it can do
14 tools, in the server's own words.
list_notesread-onlyPublished desk notes, newest first: entry number, date, title, status, topic (cyber or sanctions), readers, source class, a one-line summary, and the note's UR…
search_notesread-onlyFind published notes that mention every word of the query (a name, a list, a country, a program, a date) in the title, summary, sources or body.
get_noteread-onlyOne published note in full (Markdown), with its numbered sources and links to the official record.
search_screening_listsread-onlySearch the Consolidated Screening List (OFAC SDN and other Treasury lists; BIS Entity, Denied Persons, Unverified and Military End User lists; State ITAR-debar…
list_ofac_actionsread-onlyOFAC's recent actions, newest first: designations and removals, general licenses, FAQs, regulations and settlements, each with its date, categories and the off…
search_kevread-onlyCISA's Known Exploited Vulnerabilities catalog, newest first: CVE, vendor, product, date added, federal due date, known ransomware use, the required action, FI…
search_federal_registerread-onlySearch Federal Register rules, proposed rules, notices and presidential documents: title, type, agencies, publication and effective dates, citation, abstract a…
list_travel_advisoriesread-onlyUS State Department travel advisories, most recently updated first: country, level (1 to 4), the advisory's summary and the official page.
get_reference_ratesread-onlyThe New York Fed's reference rates: EFFR and OBFR (unsecured), SOFR, BGCR and TGCR (secured), and the SOFR averages and index (SOFRAI).
get_treasury_yieldsread-onlyTreasury's daily par yield curve, newest first: yields by tenor from 1 month to 30 years.
get_cveread-onlyEverything the record says about one CVE, in one answer: the CVE.org record (description, severity, weakness, affected products, references), CISA's exploitati…
list_cyber_advisoriesread-onlyCISA's advisories, newest first: alerts, joint cybersecurity advisories (#StopRansomware, state-sponsored activity), ICS and ICS-medical advisories, and analys…
list_cyber_incident_filingsread-onlyCybersecurity incidents public companies report on Form 8-K, newest first: Item 1.05 (the company judged it material) and, unless excluded, Item 8.01 reports m…
list_ai_stack_vulnerabilitiesread-onlyNew advisories against the software AI agents run on, newest and most severe first: agent frameworks (LangChain, LlamaIndex, CrewAI, n8n, Langflow), LLM gatewa…
Test results
Safe mode: only tools labeled read-only were run. How the test works
- ✕Fast enoughfail
1 failed, 1 warning
- !Average tool answer: 2.8 s
- ✕get_treasury_yields: Slowest tool: get_treasury_yields (18.2 s): most users will give up waiting
- and 2 more
- !Every tool is describednote
9 warnings
- !search_notes: Inputs with no description: limit
- !search_screening_lists: Inputs with no description: type, limit
- !list_ofac_actions: Inputs with no description: limit
- !search_kev: Inputs with no description: limit
- !search_federal_register: Inputs with no description: order, limit
- !list_travel_advisories: Inputs with no description: limit
- !list_cyber_advisories: Inputs with no description: limit
- !list_cyber_incident_filings: Inputs with no description: limit
- and 1 more
- ✓ConnectsConnected in 320 mspass
- ✓Ready for the newest MCP versionUses the latest MCP version (2026-07-28)pass
- ✓Lists its toolsFound 14 toolspass
- ✓Tools are labeled safe or dangerousEvery tool has a safety labelpass
- ✓No hidden instructionsNo hidden instructions found in tool descriptionspass
- ✓Tools work with good inputspass
All good
- ✓list_notes: Worked (1.5 s)
- ✓search_notes: Worked (103 ms)
- ✓get_note: Answered with an error, probably because of our sample input: No published note with slug "test". Use list_notes or search_notes.
- ✓search_screening_lists: Worked (2.0 s)
- ✓list_ofac_actions: Worked (8.2 s)
- ✓search_kev: Worked (307 ms)
- ✓search_federal_register: Worked (176 ms)
- ✓list_travel_advisories: Worked (1.6 s)
- and 6 more
- ✓Bad inputs give a clean errorpass
All good
- ✓list_notes: Refused wrong type for "topic" with a clear error
- ✓search_notes: Refused missing required input "query" with a clear error
- ✓search_notes: Refused wrong type for "query" with a clear error
- ✓get_note: Refused missing required input "slug" with a clear error
- ✓get_note: Refused wrong type for "slug" with a clear error
- ✓search_screening_lists: Refused missing required input "query" with a clear error
- ✓search_screening_lists: Refused wrong type for "query" with a clear error
- ✓list_ofac_actions: Refused wrong type for "since" with a clear error
- and 11 more
- ✓Tools work togetherpass
2 chains working
- ✓list_notes → get_note: get_note found what list_notes returned (slug = "cyb-20261023-cve-2026-110447")
- ✓search_notes → get_note: get_note found what search_notes returned (slug = "cyb-20260827-ghsa-6wvf-77m9-58rm")
- ✓No secrets leakedChecked 23 error messages: no secrets or internal detailspass
- ✓Follows MCP best practices (not scored yet)Tool names, safety labels and tool list size follow the MCP guidepass
Test it yourself
Free and open source. Same checks, same score.
npx qamcp-cli https://www.distributedrisk.com/mcpShow this score on GitHub
Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.
[](https://qamcp.dev/s/com-distributedrisk-desk.html)Score over time
- 30 Oct 202689
One test so far. New tests will show here.
Reviews
Coming soon: reviews from people who use Distributed Risk desk, signed in with GitHub, one per person. Reviews never change the score.
QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and get a verified owner mark. Founding price: $19/month for life for the first 50 teams.
Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works