UniSat (BYOK)
Read Bitcoin blocks, transactions, address balances, ordinal inscriptions and BRC-20 tokens, holders and balances from the UniSat indexer with your own API key
Discover
OpenAPIFramework & Scoring2 tools Escalation1 tools Glossary1 tools
VendorRisk
A weighted vendor/third-party risk-scoring framework -- five categories, a real composite score, and a due-diligence escalation map
Unify Dynamics LLC
Tools4read-only
Sign-inNoneno account, no key
Data keptNoneprocessed in memory
PriceFreeoptional Pro limits
StatusLiveMCP + REST
Works withMCP · RESTany agent
Try asking
Real questions, and the tools your agent calls to answer them.
What should I assess a vendor on for risk?
Tools called
risk_category_referenceRate this vendor 3/4/2/3/1 across the five risk categories -- what's the tier?
Tools called
vendor_risk_scoreHow much due diligence does a high-risk vendor need?
Tools called
due_diligence_depthWhat's the difference between inherent and residual risk?
Tools called
vendor_risk_glossaryAbout
VendorRisk is a vendor/third-party-risk-assessment toolkit. risk_category_reference explains the five-category framework -- financial stability, data security/cyber posture, compliance/regulatory history, business-continuity/concentration risk, and reputational risk -- with each category's scoring weight and example red-flag indicators. vendor_risk_score takes a 1-5 rating in each category and computes the real weighted composite score (financial 25%, data security 30%, compliance 20%, continuity 15%, reputational 10%) and the resulting tier: critical, high, medium, or low. due_diligence_depth maps a risk tier to how deep the due-diligence process should be -- required documents, audit depth, and reassessment frequency -- escalating monotonically with risk. vendor_risk_glossary defines third-party-risk-management terms. Not a certification or audit of any real vendor -- a framework and calculator for organizing your own judgment.
Sources: Computed locally / hand-curated third-party-risk-management framework; fully local, zero upstream calls
Privacy
The publisher, Unify Dynamics LLC, states that tool inputs are processed in memory and not retained.
Data not collectedNo account, no profile, no stored prompts or results.
What it can do
4 tools, grouped by job. Every one is read-only or compute-only.
- Risk category referenceExplains the five-category vendor-risk framework -- each category's scoring weight, what it measures, and example red-flag indicators.
- Vendor risk scoreComputes the real weighted composite vendor-risk score (financial 25%, data security 30%, compliance 20%, continuity 15%, reputational 10% of the…
- Due diligence depthMaps a vendor-risk tier to the depth of due diligence it warrants -- required documents/audits and reassessment frequency -- with depth increasing…
- Vendor risk glossaryDefinitions of third-party-risk-management terms: inherent risk, residual risk, SOC 2 report, concentration risk, fourth-party risk,…
Information
PublisherUnify Dynamics LLC
CategoryMoney & business
LanguagesEnglish
Built forWorldwide
CompatibilityAny MCP client · any agent · REST
Version0.1.0
MCP endpoint
https://vendorrisk.connectorbay.com/mcpREST APIopenapi.json
CountryWorldwide
More like this
Zerion (BYOK)
Read wallet portfolios, token and DeFi positions, transactions, PnL, NFTs, token prices and chain data for EVM and Solana wallets from the Zerion API with your own key
Taostats (BYOK)
Read Bittensor chain data from Taostats: TAO price, subnets and pools, validators, accounts, alpha positions, blocks and transfers with your own API key
Anvil (BYOK)
Read your Anvil e-signature packets, document workflows, workflow submissions and PDF templates through its GraphQL API with your own API key
Marketplace API (BYOK)
Search ACA health insurance plans, premiums, issuers, counties and drug names from the CMS Marketplace API behind HealthCare.gov with your own API key
Oneflow (BYOK)
Read your Oneflow contracts, templates, workspaces, tags, folders and users with your own API token
Documentation
Back to topWhat VendorRisk is for
"What should I assess a new vendor on before we sign", "we rated this vendor 2 on financials, 4 on security, 3 on compliance, 2 on continuity, 1 on reputation -- what's the risk tier and how much due diligence does it need" -- a structured way to turn scattered vendor-risk judgment calls into a consistent, weighted score and a matching due-diligence depth, computed locally from a hand-curated framework and the ratings you provide.
What it does
risk_category_reference explains the five-category vendor-risk framework -- financial stability, data
security/cyber posture, compliance/regulatory history, business-continuity/concentration risk, and
reputational risk -- each with its scoring weight and example red-flag indicators. vendor_risk_score takes a
1 (lowest risk) to 5 (highest risk) rating in each of the five categories and computes the real weighted
composite score (financial 25%, data security 30%, compliance 20%, continuity 15%, reputational 10%) plus the
resulting tier: critical (4.0+), high (3.0+), medium (2.0+), or low (below 2.0). due_diligence_depth maps a
risk tier to how deep the due-diligence process should be -- required documents, audit depth, contract terms,
and reassessment frequency -- with depth increasing monotonically as risk rises from low to critical.
vendor_risk_glossary defines third-party-risk-management terms (inherent risk, residual risk, SOC 2 report,
concentration risk, fourth-party risk, right-to-audit clause, vendor tiering).
What it is not
Not a certification, audit, or substitute for legal, compliance, insurance, or security professional review -- it is a framework and a weighted-scoring calculator for organizing your own judgment about a vendor. The category weights and tier thresholds are one reasonable, widely-used approach to third-party risk management, not a regulatory standard; adapt them to your organization's own risk appetite and regulatory obligations. It never looks up information about any real vendor -- every score comes from the ratings you supply.
Built and maintained by Unify Dynamics LLC. Contact: agent@connectorbay.com.
Privacy policy
Back to topVendorRisk — Privacy Policy
Effective 28 September 2026. Unify Dynamics LLC ("we", "us"), Menlo Park, California.
What VendorRisk is. VendorRisk is a connector (an MCP server and REST API) that AI assistants and personal agents call on your behalf to run a vendor-risk-assessment reference lookup or a weighted risk-score calculation. You interact with your assistant; the assistant sends us only the arguments needed for that one tool call.
What we receive. The arguments of each tool call — category ratings (numbers 1-5), a category or tier name you're looking up, or a glossary term — the technical headers needed to serve the request (an IP address or a client identifier supplied by the assistant, and a Pro API key if you have one), and standard server logs. We have no way to know, and do not ask, which real vendor a rating refers to.
Everything is computed locally from the numbers and lookups you provide, and nothing is stored. There is no upstream call at all — this connector has no live lookups of any real vendor, it is a bundled reference framework plus arithmetic on the numbers you send — and no request, including ratings or the resulting scores, is logged in request bodies, recorded, or used to train anything.
What we do not receive or store. We do not receive your conversation with the assistant, and we do not build a profile from your queries: each request is computed independently and nothing carries over between requests. Rate-limit counters (a client identifier and timestamps) are held in memory for at most 24 hours. Hosting-provider access logs, which contain IP addresses and request paths but not request bodies, are retained for up to 30 days for security and abuse prevention.
Sub-processors. None — every calculation runs locally against a bundled reference framework with no upstream call of any kind. Hosting: Vercel (United States regions).
Legal bases and your rights. Our processing is necessary to provide the service you request through your assistant. Because we store no personal data beyond short-lived logs, requests to access, correct or delete personal data are usually satisfied automatically; you can still contact agent@connectorbay.com and we will respond within 30 days. We do not sell or share personal information and do not use your data to train models.
Children. VendorRisk is a general-audience service operated by the adult using the assistant.
Changes. We will post changes here with a new effective date.
Terms of service
Back to topVendorRisk — Terms of Service
Effective 28 September 2026. These terms govern use of the VendorRisk connector ("the Service") operated by Unify Dynamics LLC ("we", "us").
- The Service. VendorRisk is a fully local vendor/third-party-risk-assessment framework and weighted risk-scoring calculator. It is accessed through an AI assistant or directly over MCP or HTTP, and performs no lookups of any real vendor — every score comes directly from the ratings supplied in that request.
- Educational and organizational tool, not professional advice. VendorRisk is not legal, compliance, insurance, financial, or security advice, and is not a certification or audit of any vendor. The risk category weights, tier thresholds, and due-diligence recommendations reflect one reasonable, widely-used approach to third-party risk management, not a regulatory or industry-mandated standard.
- Your judgment, your ratings. You are responsible for the accuracy of any ratings or inputs you supply, and for deciding how (or whether) to act on a computed score or due-diligence recommendation for any real vendor relationship.
- Acceptable use. Automated use within the published rate limits is welcome.
- Availability. The Service is provided "as is" without warranty. We may change, limit or discontinue it at any time.
- Data. Our Privacy Policy describes what we process. In short: every calculation is computed locally from the ratings you provide, and nothing about a real vendor is stored.
- Pro keys. Optional Pro API keys are issued at our discretion, are personal to the holder and may be revoked for abuse.
- Liability. To the fullest extent permitted by law, Unify Dynamics LLC is not liable for any loss arising from use of, or reliance on, the Service, including any vendor-relationship decision made using a score or recommendation computed here. Our total liability is limited to US $100.
- Governing law. California law; venue in San Mateo County, California.
- Contact. Unify Dynamics LLC · agent@connectorbay.com · https://connectorbay.com/vendorrisk
Support
Back to topVendorRisk support
Email agent@connectorbay.com. We answer within two business days.
- MCP endpoint:
https://vendorrisk.connectorbay.com/mcp - REST API:
https://vendorrisk.connectorbay.com/openapi.json - Live status: https://vendorrisk.connectorbay.com/health
When you report a problem, include the question you asked your agent, roughly when, and which agent you used (for example Claude, ChatGPT or Gemini). Never send us passwords, account numbers or ID numbers. VendorRisk never asks for them.