MCP security report
historiapojazduvin.com
B85/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓10 tools scanned
https://historiapojazduvin.com/mcp
mediumsubmit_enquiry
Consent text contradicts stated data flow to third-party providers
enquiry_describe states that submit_enquiry 'starts an enquiry with human providers who quote directly,' meaning third-party providers receive the person's details. Yet the consent wording the user is asked to agree to explicitly says 'Historia Pojazdu VIN odpowie e-mailem na Twoje pytanie i nie przekaże danych nikomu innemu' (will not pass the data to anyone else). This is a direct contradiction: the tool's own documentation says data goes to external providers, while the consent text the person approves says it will not. If the agent presents this consent line as accurate, it would materially mislead the user about how their personal data (contact info, vehicle details) is shared, which is a user-harm concern independent of the dataset-query tools.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowsubmit_enquiry
Two-step confirmation flow should be verified to actually block premature submission
The tool is designed as a two-step flow (summary/token, then final submission with the token) which is good practice, but the agent should be careful to always show the person the full summary and the (now contradictory) consent line verbatim before proceeding to step 2, rather than assuming consent based on prior conversation context.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/1507e0bb-13ae-4514-a135-0db0c82ee32f)Scanned 10/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free