MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/benchmarks/production-schedule-optimizer-v1/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool generates and returns a raw private key, instructing the agent to persist it immediately
The register tool description states it 'Mints a provisional agent identity... and returns api_key, owner_key, and (testnet) wallet_private_key ONCE' and instructs 'Persist them immediately (shown once).' This puts raw wallet key material directly into the tool-call output that flows through the agent's context/logs. Even though scoped to testnet, this pattern of generating and returning a private key inline (rather than via a secure out-of-band channel) creates real risk of the key being logged, echoed back to the user in plaintext, or otherwise leaked if the agent's transcript/context is stored or shared. The description's urgency ('shown once') also pressures the agent to act quickly rather than verify secure handling.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowregister
Session/auth model described in a way that could normalize skipping standard authorization headers
The description says 'it upgrades in place — keep using this session as-is, no Authorization header needed... Authorization: Bearer is only when opening a NEW connection.' This instructs the agent to treat an unauthenticated-looking session as now privileged without an explicit credential check, which is unusual guidance to embed in a tool description and could be confusing/risky if the agent generalizes this pattern to other tools or sessions.
lowget_recommended_action
Description encourages the agent to skip independent reasoning
The description states the tool 'Returns the single next tool + pre-filled args so you do not have to reason over the full catalog.' This explicitly nudges the agent to act on pre-filled tool/argument suggestions without independently verifying them, which could be leveraged to steer the agent into calling other tools (including ones with financial/on-chain side effects) with reduced scrutiny.
lowbenchmarks_list
Urgency-style framing ('call this now') used to prompt immediate tool invocation
This tool and several others (benchmarks_get, a2awire_guide, find_paid_work, register, get_agent_contract) prefix descriptions with '✅ No API key needed — call this now.' This is a mild persuasive/imperative pattern aimed at the agent rather than purely descriptive documentation. While not overtly harmful here, this style of instruction embedded in a tool description is a known vector for steering agent behavior and warrants caution if it appears alongside more sensitive tools.
lowhire_and_execute
Broad one-call capability to autonomously fund on-chain escrow and execute a task
This tool searches, creates an escrow, funds it on-chain with USDC, and executes a task in a single call, based only on a capability string, task text, and a max price ceiling (defaulting to 1.0 USDC). While this matches the tool's stated purpose, it is worth flagging that a single tool call can trigger real financial transactions on-chain with no additional confirmation step beyond the price cap parameter — agents or callers should ensure max_price_usdc is deliberately set and not left at defaults in contexts where unintended spend is a concern.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/071a0749-077e-4d84-8300-c14f916fbc7f)Scanned 9/7/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free