Derisk MCP Server

AI-Native Risk Intelligence Systems, OpenDeRisk——Your application system risk intelligent manager provides 7* 24-hour comprehensive and in-depth protection. That is what the derisk mcp server brings to an AI assistant: the same capability, reachable through the Model Context Protocol rather than a separate app or dashboard.

The short version

The system employs a multi-agent architecture. Currently, the code primarily implements the highlighted components. Alert awareness is based on Microsoft's open-source OpenRCA dataset. The decompressed dataset is approximately 26GB. On this dataset, we achieve root cause analysis through multi-agent collaboration, with Code-Agent dynamically writing code for final analysis.

The tools it exposes

The server publishes 11 tools. What each one is for:

• Notice — We use the OpenRCA Dataset [Bank Dataset](https://drive.usercontent.google.com/download?id=1enBrdPT3wLG94ITGbSOwUFg9fkLR-16R&export=download&confirm=t
• Download — gdown https://drive.google.com/uc?id=1enBrdPT3wLG94ITGbSOwUFg9fkLR-16R
• DataExpert — Upload metrics, logs, traces, or Excel data for conversational analysis
• OpenDeRisk — OpenDeRisk is an AI-Native Risk Intelligence System designed as your application system's intelligent manager, providing 7×24 hour comprehensive and
• Features — 1. DeepResearch RCA: Quickly locate root causes through in-depth analysis of logs, traces, and code. 2. Visualized Evidence Chain: Fully
• Architecture — The Architecture tool exposed by this server
• Introduction — The system employs a multi-agent architecture. Currently, the code primarily implements the highlighted components. Alert awareness is based on
• Start — The Start tool exposed by this server
• Development — The Development tool exposed by this server
• Citation — If you find this repository helpful, please cite: @misc{di2025openderiskindustrialframeworkaidriven, title={OpenDerisk: An Industrial Framework for
• Acknowledgement — The OpenDeRisk-AI community is dedicated to building AI-native risk intelligence systems. 🛡️ We hope our community can provide you with better

Getting it running

Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client.

How it compares

Among the developer tooling options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Derisk's toolset — Notice, Download, DataExpert and 8 more — is a fair guide to whether it matches your workflow. It is maintained by derisk-ai; worth a glance at recent repository activity before you build anything load-bearing on it.

This entry was verified against Derisk's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.

Things to watch

• It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
• With 11 tools registered it takes up a noticeable share of the context window; turn it off in projects that never touch Derisk.
• Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.