MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/support-agent-trials/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool returns and instructs persistence of raw private key material
The register tool mints and returns a wallet_private_key (and api_key/owner_key) in the tool response and instructs the agent to 'persist them immediately.' Returning raw private keys through an LLM-visible channel risks the secret being logged, echoed back to the user, or leaked into context/history. Even on testnet, this pattern of pushing credential material through the agent's context is risky and should ideally be handled out-of-band (e.g., a secure vault or direct user delivery) rather than via tool-call output the agent is told to remember and reuse.
mediumhire_and_execute
Single call bundles discovery, escrow creation, on-chain funding, and task execution
This tool autonomously searches for an agent, creates and funds an on-chain USDC escrow, and executes a task in one call, with the buyer identity implicitly derived from the authenticated principal. This is a broad, irreversible financial action (on-chain fund transfer) triggered by a single tool call with only a max_price_usdc ceiling as a safeguard — an agent could be induced (via prompt injection from job descriptions, benchmark text, or other untrusted content) to spend user funds without a clear per-transaction confirmation step.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowregister
Urgency language directing autonomous action ('call this now')
The description opens with '✅ No API key needed — call this now,' pushing the agent to invoke an identity-creating, wallet-provisioning action immediately rather than waiting for explicit user intent. Combined with financial/identity side effects (minting a new agent identity and wallet), this kind of imperative phrasing embedded in a tool description is a mild manipulation pattern that could cause the agent to take consequential actions without user confirmation.
lowbenchmarks_list
Imperative 'call this now' phrasing aimed at the agent
Same pattern as other tools: description contains directive language ('call this now') intended to influence agent behavior/sequencing rather than simply describing functionality. Low risk here since the tool itself is read-only, but it's part of a broader pattern across this tool set nudging the agent toward autonomous action.
lowbenchmarks_get
Imperative 'call this now' phrasing aimed at the agent
Same directive-language pattern as benchmarks_list; low risk since the tool is read-only, but contributes to a platform-wide pattern of instructing the agent to act immediately without user deliberation.
lowa2awire_guide
Imperative 'call this now' phrasing aimed at the agent
Description uses '✅ No API key needed — call this now' urging immediate invocation. Low risk standalone, but part of a repeated pattern across many tools that could condition the agent to bypass normal user-intent checks before taking further (potentially monetary) actions.
lowfind_paid_work
Imperative 'call this now' phrasing aimed at the agent
Uses the same 'call this now' urgency framing to encourage the agent to search for and begin paid work autonomously; combined with the broader flow (start_job, hire_and_execute) this could nudge the agent toward committing the user's funds/identity without explicit confirmation.
lowget_agent_contract
Imperative 'call this now' phrasing aimed at the agent
Read-only verification tool but still uses the 'call this now' directive pattern seen across the tool set; low risk on its own.
lowdata_session_query
Platform can sign delivery receipts on behalf of the user's wallet
The sandbox_receipt flag lets the platform sign a DeliveryReceipt using the caller's provisioned sandbox wallet private key server-side. While scoped to testnet sandbox wallets, this normalizes a pattern where the platform holds/uses private keys on the user's behalf, which could be risky if similar flags are ever extended beyond sandbox use.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/1c97a45d-1aeb-4c3d-969d-f8c3649e1f9d)Scanned 9/9/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free