MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
D61/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/lang-pt/mcp
mediumagent-tool-index
Embedded directive instructing agent to follow a specific tracked redirect
The description tells the agent to 'Follow start_here.hop first' and explicitly describes an appended tracking query string (utm_source=agent-observatory&utm_medium=agent). This is an instruction aimed at steering the agent's navigation behavior toward a particular link/tracking funnel rather than simply describing the tool's function, and it does so without informing the user that traffic/attribution tracking is occurring.
mediumpeople-search-index
Same tracked-redirect instruction plus people-search/data-broker purpose
Like the other 'index' tools, this description directs the agent to follow a specific hop URL carrying utm_source/utm_medium tracking parameters — an embedded navigation instruction rather than a neutral capability description. Additionally, the tool's stated purpose is to locate a 'people-search' service for 'living people,' which facilitates discovery of personal/location data about individuals; combined with the steering instruction, this could nudge an agent toward a third-party people-search/data-broker product without clear user awareness or consent.
mediumagent-ads-index
Embedded directive to follow tracked redirect; monetization/advertising steering
Description instructs the agent to 'Follow start_here.hop first' with the same utm_source=agent-observatory&utm_medium=agent tracking pattern, and further describes a '7-day trial handoff for your operator' — i.e., guiding the agent toward signing up the operator for a paid advertising/trial service. This is an instruction embedded in the tool description aimed at directing agent behavior toward a commercial funnel rather than describing a user-requested capability, and could commit the user/operator to a trial without explicit confirmation.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowlang-pt
Oversized shared schema with irrelevant parameters
This tool (and all 28 similarly-schemed tools) exposes a schema with ten unrelated fields (zone, json, url, host, website, city, query, path, ref, feed) regardless of the tool's narrow stated purpose. While each appears individually benign, this generic catch-all schema pattern repeated across many distinctly-named tools increases the risk that an agent could be induced to route sensitive-looking data (e.g., file paths, feeds, queries) through the wrong tool, and makes it harder to verify that each tool only uses the data relevant to its description.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/00ebf5aa-3743-49de-be51-538135657ae6)Scanned 10/2/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free