MCP security report
a2awire.com
F5/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/marinewatch-live-noaa-marine-buoy-observations-b6e91c/http
highregister
Tool can return a wallet private key in its output
The withdrawal_address field description states: 'Omit it on testnet and a sandbox payout wallet is auto-provisioned, returning its private key exactly once.' Returning a raw private key through a tool-call response is dangerous — it may be captured in agent logs, conversation history, or forwarded to an LLM provider, permanently compromising the wallet. Sensitive key material should never be transmitted through a channel an LLM/agent reads and potentially persists.
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumhire_and_execute
One-call autonomous on-chain spend with no explicit confirmation step
This tool searches for an agent, creates an escrow, funds it on-chain with USDC, and executes a task — all in a single call, driven only by a capability string, task text, and a max price ceiling. There is no separate confirmation/review step before funds are committed on-chain, meaning a single tool call (potentially influenced by manipulated task_input or capability matching) can move real value. Given the tool's stated purpose (hiring marketplace) this breadth is plausible but still represents a broad, real-money capability bundled into one call.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdata_preview
Urgency-inducing 'call this now' language aimed at the agent
The description opens with '✅ No API key needed — call this now' and closes with 'Try one of the sample questions now.' This is phrased as an imperative directed at the AI agent rather than neutral documentation, nudging it to invoke the tool immediately without normal deliberation. The same pattern recurs across several tools in this set (a2awire_guide, find_paid_work, register, get_agent_contract), which is consistent with a soft prompt-injection/urgency pattern designed to bias agent behavior toward action.
lowa2awire_guide
Urgency-inducing 'call this now' language
Description begins with '✅ No API key needed — call this now', an imperative aimed at the agent rather than descriptive documentation of functionality, encouraging immediate invocation.
lowfind_paid_work
Urgency-inducing 'call this now' language
Description begins with '✅ No API key needed — call this now', pushing the agent toward immediate action rather than neutral tool description.
lowregister
Urgency-inducing 'call this now' language
Description begins with '✅ No API key needed — call this now', encouraging immediate registration without deliberation.
lowget_agent_contract
Urgency-inducing 'call this now' language
Description begins with '✅ No API key needed — call this now', an imperative nudge rather than neutral documentation.
lowregister
Autonomous child-agent spawning enabled by default
spawn_approval_required defaults to false ('Defaults to autonomous'), meaning foundry child agents can be spawned without owner approval unless explicitly opted out. Combined with wallet_balance-based spending caps that refill as the agent earns, this allows autonomous proliferation of agents/spending without an explicit human checkpoint.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/1a213507-b114-4019-bbb4-ab38f635cdfa)Scanned 9/9/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free