apro-sport-get
APRO v2 sports: generic GET for routes under /v2/sport/... (NFL, NBA, Soccer, Tennis, NCAA Football, etc.). route must include the /v2/ prefix; pass URL query params in query, not appended to route. Overview: https://docs.apro.com/ai-oracle/getting-started/quickstart/apro-ai-oracle-api-v2/sports
This record as markdown: /tools/demomagic-lucy-apro/apro-sport-get.md
What apro-sport-get does on Lucy Apro
AI agents call apro-sport-get to retrieve information from Lucy Apro without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.
| Parameter | Type | Required | Description |
|---|---|---|---|
query | object | — | Optional query string as a flat object: keys are parameter names, values string | number | boolean. Do not nest objects or JSON-stringify the whole query. |
route | string | — | Full path starting with /v2/sport/... only. Examples: /v2/sport/nfl/games, /v2/sport/nba/scoreboard. Do not pass host or ?query here — use the query argument. |
Parameters from the server's own tool schema.
Why apro-sport-get is rated Low
This tool retrieves sports data (NFL, NBA, Soccer, Tennis, NCAA Football statistics/information) via GET requests. GET operations are inherently read-only with no side effects. The tool serves a data retrieval function consistent with the Read category. The low severity reflects that retrieving public sports data poses minimal risk even if misused by an agent.
From the tool's definition Tool description explicitly states 'generic GET for routes under /v2/sport/...' and mentions passing 'URL query params', which are characteristic of read-only HTTP GET operations. No mention of data modification, deletion, execution, or financial operations.
Risk signalsAccepts freeform code/query input (query)
Attacks that exploit this kind of access
The rule that runs apro-sport-get safely
PolicyLayer is an MCP gateway: it sits between your AI agents and Lucy Apro, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For apro-sport-get, this is the rule to start with:
apro-sport-get is read-only, so it stays allowed. Everything else on the server is denied unless you say otherwise.
The button opens the PolicyLayer dashboard: create your workspace, connect Lucy Apro, apply this rule, and every apro-sport-get call is checked against it from then on.
Questions about apro-sport-get
APRO v2 sports: generic GET for routes under /v2/sport/... (NFL, NBA, Soccer, Tennis, NCAA Football, etc.). route must include the /v2/ prefix; pass URL query params in query, not appended to route. Overview: https://docs.apro.com/ai-oracle/getting-started/quickstart/apro-ai-oracle-api-v2/sports. It is categorised as a Read tool in the Lucy Apro MCP Server, which means it retrieves data without modifying state.
apro-sport-get accepts 2 parameters: query, route. The full parameter table on this page comes from the server's own tool schema.
Register the Lucy Apro MCP server in PolicyLayer and add a rule for apro-sport-get: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Lucy Apro. Nothing to install.
apro-sport-get is a Read tool with low risk. Read-only tools are generally safe to allow by default.
Yes. Add a rate_limit block to the apro-sport-get rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for apro-sport-get. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
apro-sport-get is provided by the Lucy Apro MCP server (demomagic/lucy-apro). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
More on Lucy Apro, and thousands of servers like it.
This server
Across the catalogue