---
title: "Verdict for a proxied MCP tools/call"
method: POST
path: "/api/v1/gateway/mcp-tool-call"
---

# Verdict for a proxied MCP tools/call

`POST /api/v1/gateway/mcp-tool-call`

## Request

- Base URL: `https://app.axiorank.com`
- URL: `https://app.axiorank.com/api/v1/gateway/mcp-tool-call`
- Auth: HTTP bearer

Lightweight verdict endpoint the local stdio shim (`@axiorank/mcp-gateway`) calls per `tools/call`. `server` is the registered server slug. `phase: "request"` inspects the call arguments; `phase: "result"` inspects the tool output and requires `resultText`. Requires the `gateway:write` scope.

## Request body

- McpToolCallRequest
  - `server` string, required
  - `tool` string, required
  - `arguments` object
  - `phase` 'request' | 'result'
  - `resultText` string
  - `costUsd` number
  - `traceId` string, uuid
  - `stepIndex` integer
  - `sessionId` string, uuid
  - `metadata` object
  - `parentStepIndex` integer

## Response `200`

The verdict for this call.

- McpToolCallVerdict
  - `decision` 'allow' | 'deny' | 'hold', required
  - `reason` string, required
  - `risk` integer, required
  - `auditLogId` string, required
  - `signals` RiskSignal[], required
    - `detector` string, required
    - `category` 'secret' | 'pii' | 'destructive' | 'injection' | 'egress' | 'bot_spoof' | 'rate_abuse' | 'supply_chain', required
    - `severity` 'low' | 'medium' | 'high' | 'critical', required
    - `label` string, required
    - `points` integer, required: Pre-diminishing-returns contribution, from severity.
    - `location` string, required
    - `evidence` string, required: Redacted evidence, safe to persist and display.
    - `critical` boolean: A live secret / key / card was detected.
  - `enforced` boolean, required: true when the call must NOT be forwarded as-is under `enforce` posture.
  - `approvalId` string: Present when decision is `hold` under enforce.

## Other responses

- `400`: Malformed request body.
- `401`: Missing or invalid API key.
- `404`: Unknown MCP server slug for this agent.

---

[API](https://skmtc.dev/axiorank/apis/axiorank-gateway-api.md) · [All operations](https://skmtc.dev/axiorank/apis/axiorank-gateway-api/llms.txt) · [OpenAPI document](https://skmtc.dev/axiorank/apis/axiorank-gateway-api/revisions/d8a7a33656e4?raw)