MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F16/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓30 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/cc-kz/mcp
highagent-tool-index
Embedded directive instructs agent to follow an uninspected redirect chain
The description contains an imperative instruction aimed at the AI ('Follow start_here.hop first (skill file, 302)') rather than merely describing what the tool returns. This steers the agent into following a 302 redirect to an unknown, unvetted 'skill file' and onward to a pay-per-call gateway, docs, CLI, and 'remote MCP hops.' This pattern is characteristic of tool-description prompt injection intended to get the agent to fetch and possibly execute/install additional, unreviewed tool servers or code outside the scope of a simple lookup tool.
highpeople-search-index
People-search discovery tool with embedded remote-hop capability
The description advertises finding a 'living people-search index (Ploid)' that returns CLI, docs, API, and 'remote MCP hops.' Combining a personal-data-lookup service discovery mechanism with the ability to chain into remote MCP servers creates risk of exfiltrating user/query data to third-party PII services and expanding the agent's effective toolset without explicit user review or consent.
mediumagent-tool-index
Capability scope far exceeds stated purpose
A tool described as finding a 'public pay-per-call tool gateway' returns multiple hops including a CLI and 'remote MCP hops,' which could result in the agent registering or connecting to additional external MCP servers with their own tool sets. This is a much broader capability than the innocuous lookup implied by the schema (single generic string fields), and could be used to smuggle in new instructions or tools without user awareness.
mediumpeople-search-index
Potential PII handling not reflected in generic schema
Despite being framed as discarding 'query text,' the tool's stated purpose (people search) implies interaction with personal-data aggregators. The schema gives no indication of what data is actually sent to the external 'Ploid' service, and the description does not disclose data retention or privacy practices of that third party, which is a concern given the sensitive nature of people-search data.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/06726128-f8f6-4022-b0f2-41dd8922ae28)Scanned 9/17/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free