MCP security report
vigilnotary.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓26 tools scanned
https://vigilnotary.com/mcp
mediumvigil_usage
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_notarize
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_set_watchdog
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_heartbeat
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_watchdog_status
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_delete_watchdog
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_grant_lease
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_renew_lease
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_revoke_lease
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_leases
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_anchor
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_journal_put
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_journal_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_journal_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_journal_delete
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumvigil_revoke_key
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowvigil_verify_source
Tool can trigger paid transactions with agent-set price ceiling
The tool description tells the agent to 'read price and payment requirements before authorizing' and retry with payment proof, implying the agent may authorize a paid action on the user's behalf. While max_price_usd is a bound, the schema does not require explicit per-call user confirmation before spending money, which could let an agent make small purchases without the user's real-time consent.
lowvigil_set_watchdog
Arbitrary outbound webhook with unrestricted free-text payload field
vigil_set_watchdog POSTs a signed payload (including an optional 'message' field up to 2000 chars) to a user-supplied https webhook on missed heartbeat. Unlike vigil_notarize's label field, there is no warning here not to include sensitive data in 'message', so an agent could inadvertently include private information that gets sent to an external endpoint.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/0338e9bb-8a7c-4388-a499-6604030409a4)Scanned 9/10/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free