MCP security report
omnia-sell.rjhsignaltech.workers.dev
B85/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓4 tools scanned
https://omnia-sell.rjhsignaltech.workers.dev/mcp
mediumget_payment_terms
Facilitates autonomous crypto payment authorization via unfamiliar third-party facilitator
The tool describes a flow where the agent could construct/relay an EIP-3009 payment authorization that is verified and settled automatically through 'facilitator.xpay.sh', a non-standard, unverified third-party service, with 'no gas for the buyer' and a returned transaction hash. If the agent acts on this description without explicit, informed user confirmation for each payment, it could authorize real fund transfers on the user's behalf. Agents should be careful not to sign or broadcast payment authorizations without clear, itemized user consent, and should treat the named facilitator domain as an unverified external party receiving payment-related data.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowlicence_audit_preview
Business-model framing may pressure agent toward upsell
The description repeatedly emphasizes the free tier's limitations (8 packages, no obligations scoring, no SBOM) and points to a paid call, which is benign as a product description but could subtly bias the agent to recommend or initiate the paid workflow rather than neutrally serving the user's actual need. Not malicious, but worth noting as steering language.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/1de792fe-4203-4986-a0a9-38a41004990d)Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free