Shadow AI List
Risk-ranked registry of AI tools: look up an AI tool's risk or check if a domain is shadow AI.
| Endpoint | https://ailist.airiskmanagement.ca/mcp (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 4 tools · grade A (100) · pin ts_68f19027ce474ad51eb20034c3482c63 · protocol 2025-06-18 |
| First / last listed | 2026-10-28 06:55 UTC / 2026-10-28 06:55 UTC |
| Grade over time | 2026-10-28: A (100), 4 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: lookup_ai_tool_risk check_domain_against_registry list_shadow_ai get_top_risky_ai
lookup_ai_tool_risk | Look up an AI tool by name, vendor, or domain and return its AI Exposure Index risk score, risk band, category, and whether it trains on user data. Covers the free top 100. params: query* |
check_domain_against_registry | Check whether a domain or subdomain belongs to a known AI tool - i.e. whether traffic to it is shadow AI. Returns the tool and its risk if matched. Covers the free top 100. params: domain* |
list_shadow_ai | List AI tools from the registry, optionally filtered by category. Returns name, domain, category, and risk band. Covers the free top 100. params: category, limit |
get_top_risky_ai | Get the highest-risk AI tools by AI Exposure Index risk score. Returns name, domain, category, and risk score + band. Covers the free top 100. params: limit |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.