MCP security report
api.buyerawareapp.com
D61/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓5 tools scanned
https://api.buyerawareapp.com/mcp
mediumcreate_trial_key
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumtank_alternatives
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumtank_lookup
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowcreate_trial_key
Embedded agent-behavior instructions in description
The description tells the AI what to do procedurally ('Call this once when no key is configured...show the user the key and tell them to save it. Do not call it again...'). This is mild policy embedding rather than a pure functional description. It's not overtly malicious, but it is steering agent behavior via description text rather than schema/logic, and collects an email address tied to key issuance which is a reasonable but sensitive data point worth noting for privacy handling.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/09b2b6e8-8b44-49f5-aebe-565001ebc22b)Scanned 9/6/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free