# apro-sport-get

APRO v2 sports: generic GET for routes under /v2/sport/... (NFL, NBA, Soccer, Tennis, NCAA Football, etc.). route must include the /v2/ prefix; pass URL query params in query, not appended to route. Overview: https://docs.apro.com/ai-oracle/getting-started/quickstart/apro-ai-oracle-api-v2/sports

Agent View of the PolicyLayer registry record for `apro-sport-get`. HTML page: https://policylayer.com/tools/demomagic-lucy-apro/apro-sport-get

## Facts

- Tool: `apro-sport-get`
- Server: Lucy Apro (`demomagic/lucy-apro`) — https://policylayer.com/tools/demomagic-lucy-apro.md
- Homepage: https://github.com/demomagic/lucy-apro
- Risk category: Read (Low risk)
- Registry record: grade B, identity unverified
- Server rate-limited: no
- Parameters: 2
- Recommended policy verdict: Allowed

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `query` | object | no | Optional query string as a flat object: keys are parameter names, values string \| number \| boolean. Do not nest objects or JSON-stringify the whole query. |
| `route` | string | no | Full path starting with /v2/sport/... only. Examples: /v2/sport/nfl/games, /v2/sport/nba/scoreboard. Do not pass host or ?query here — use the query argument. |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "apro-sport-get",
    "arguments": {}
  }
}
```

## Why apro-sport-get is rated Low

This tool retrieves sports data (NFL, NBA, Soccer, Tennis, NCAA Football statistics/information) via GET requests. GET operations are inherently read-only with no side effects. The tool serves a data retrieval function consistent with the Read category. The low severity reflects that retrieving public sports data poses minimal risk even if misused by an agent.

From the tool's own definition: "Tool description explicitly states 'generic GET for routes under /v2/sport/...' and mentions passing 'URL query params', which are characteristic of read-only HTTP GET operations. No mention of data modification, deletion, execution, or financial operations."

Risk signals: Accepts freeform code/query input (query)

## Use case

AI agents call apro-sport-get to retrieve information from Lucy Apro without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Lucy Apro:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "apro-sport-get": {}
  }
}
```

## Other tools on Lucy Apro (7)

- `apro-socialmedia-proxy` — Read — https://policylayer.com/tools/demomagic-lucy-apro/apro-socialmedia-proxy.md
- `apro-socialmedia-support-paths` — Read — https://policylayer.com/tools/demomagic-lucy-apro/apro-socialmedia-support-paths.md
- `apro-ticker-currencies-list` — Read — https://policylayer.com/tools/demomagic-lucy-apro/apro-ticker-currencies-list.md
- `apro-ticker-currency-ohlcv` — Read — https://policylayer.com/tools/demomagic-lucy-apro/apro-ticker-currency-ohlcv.md
- `apro-ticker-currency-price` — Read — https://policylayer.com/tools/demomagic-lucy-apro/apro-ticker-currency-price.md
- `apro-ticker-currency-support` — Read — https://policylayer.com/tools/demomagic-lucy-apro/apro-ticker-currency-support.md
- `greet` — Read — https://policylayer.com/tools/demomagic-lucy-apro/greet.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=demomagic-lucy-apro · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/demomagic-lucy-apro