MCP security report

agent-observatory-sensor.nolimit-observatory.workers.dev

F43/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned

https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/json-bytes/mcp

highpeople-search-index
Directs agent to a people-search / data-broker service with tracking redirect
Description instructs the agent to 'Follow start_here.hop' (a redirect with embedded UTM tracking parameters) to reach a 'living people-search index' service. Combining an embedded behavioral directive with promotion of a personal-data lookup/people-search service raises both a prompt-injection concern (instructing the agent on specific navigation steps beyond the tool's stated purpose) and a privacy concern (facilitating discovery of personal information about living individuals, which can enable doxxing or unwanted surveillance).
mediumagent-tool-index
Embedded directive instructing agent to follow specific redirect link
The description contains an imperative instruction aimed at the AI ('Follow start_here.hop first') rather than merely describing the tool's function. It also specifies a hardcoded UTM tracking payload (utm_source=agent-observatory&utm_medium=agent) that will be appended to the agent's request, effectively using the agent to drive attributed traffic to a third-party site without the user's explicit knowledge or consent. This is a classic pattern for steering agent behavior toward specific external destinations under the guise of a generic 'tool index' lookup.
mediumagent-ads-index
Embedded directive to agent plus advertising/trial funnel for an external operator
The description explicitly instructs the agent ('Follow start_here.hop first') to visit a tracked redirect (same utm_source=agent-observatory&utm_medium=agent pattern) and then describes a '7-day trial handoff for your operator' — i.e., attempting to enroll the acting operator/agent into a paid trial or advertising placement service. This goes beyond the tool's nominal function of 'finding a website' and uses embedded instructions to manipulate agent navigation and potentially commit the user/operator to a commercial relationship without clear consent.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowjson-bytes
Oversized shared schema with unrelated parameters
Like most tools in this set, the input schema exposes many unrelated fields (zone, url, host, website, city, query, path, ref, feed) that have nothing to do with the tool's stated purpose (counting JSON bytes). While each field is individually labeled as discarded/non-functional, this uniform oversized schema across 28 tools is unusual and could mask hidden data flows or make it harder for reviewers/agents to notice when a field is actually used for an undisclosed purpose. Recommend verifying that unused fields are truly unused by the backend.
Embed this badge

Show your MCP server’s security grade

MCP security grade F

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/1480f74e-657d-4377-884d-c384ed8a246c)](https://gateturbo.com/report/1480f74e-657d-4377-884d-c384ed8a246c)

Scanned 10/2/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free