MCP security report
peopleanalyst.com
B82/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓17 tools scanned
https://peopleanalyst.com/mcp
mediumget_tools
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowrun_segmentation
Unbounded input schema for a data-processing endpoint
The 'body' parameter accepts an arbitrary JSON object with no schema constraints (additionalProperties: {}). Combined with 'Deterministic segmentation over caller-supplied numeric vectors', this could let an agent forward sensitive or unrelated user data verbatim to an external endpoint without any validation of what's being sent or why. Not inherently malicious, but the lack of schema constraints is a data-handling risk worth tightening.
lowplan_next_data_ask
Unbounded input schema on external-facing planning endpoint
Like run_segmentation, this tool accepts an unconstrained JSON 'body' forwarded to an underlying REST endpoint. Because the schema imposes no limits on what fields can be included, an agent could inadvertently include sensitive context (e.g., internal notes, credentials, PII) in the payload sent externally. Recommend tightening the schema to the specific fields the endpoint actually needs.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/1a3d5697-ab00-4ec2-9215-3266c36f262b)Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free