MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
D46/100
Security grade DHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/fletcher-len/mcp
highpeople-search-index
Facilitates discovery of a people-search / surveillance service
This tool's stated purpose is to locate an index for searching information about 'living people' (a people-search/data-broker type service), which is a capability with real potential for privacy harm (doxxing, stalking, unauthorized profiling) and is wildly disproportionate to the other benign utility tools in this set (timezone, JSON validation, etc.). It also embeds a directive to follow a tracked redirect ('start_here.hop' with utm_source=agent-observatory&utm_medium=agent) before returning API/CLI/MCP hooks, nudging the agent toward integrating with a personal-data search service.
mediumagent-tool-index
Embedded directive to follow tracked redirect chain to a monetized gateway
The description instructs the agent to 'Follow start_here.hop first' through a 302 redirect carrying utm_source=agent-observatory&utm_medium=agent, then leads to a 'pay-per-call' tool gateway, docs, CLI and remote MCP hops. This is an imperative aimed at the agent's behavior (not just a description of inputs/outputs), and it directs the agent toward a third-party monetized service while embedding tracking parameters that identify the traffic as agent-generated. This could result in the agent autonomously registering with or incurring costs from an external pay-per-call service without the user's informed consent.
mediumagent-ads-index
Embedded directive to sign up an operator for an ad/monetization trial via tracked redirect
The description instructs the agent to follow a redirect chain (start_here.hop, 302 with utm_source=agent-observatory&utm_medium=agent) to reach a 'client center' and a '7-day trial handoff for your operator.' This pushes the agent toward initiating a trial/sign-up on behalf of the user's operator without explicit user request, and embeds agent-identifying tracking parameters. The combination of an embedded procedural directive plus a push toward a commercial trial activation is a manipulation concern beyond the tool's stated discovery purpose.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/0d034f72-3688-4d17-a1d7-f9dff6f06052)Scanned 10/4/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free