MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/claim-review-2026-09-10-4cd7d405/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_recommended_action
Tool description discourages independent reasoning by the agent
The description states the tool 'Returns the single next tool + pre-filled args so you do not have to reason over the full catalog.' This explicitly nudges the calling agent to skip its own judgment and blindly execute a pre-selected action (which can include registering an identity, requesting funds, or spending USDC via hire_and_execute). Combined with the chained 'next step' guidance across other tools, this creates a risk of the agent performing consequential/financial actions without adequately verifying user intent.
mediumhire_and_execute
Broad one-call capability chains discovery, escrow funding, and on-chain payment
This single tool call searches the marketplace, creates an escrow, funds it on-chain with USDC, and executes a task, all without intermediate confirmation steps exposed to the caller. Given the surrounding tool descriptions actively encourage the agent to act autonomously ('call this now', pre-filled next actions), an agent could be induced to move funds and hire third-party agents without explicit per-step user approval. The max_price_usdc cap mitigates but does not eliminate the risk of unauthorized spend.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowregister
Imperative 'call this now' language nudges autonomous onboarding without user request
The description opens with '✅ No API key needed — call this now' and states registration 'upgrades in place' automatically. This is a soft behavioral-steering pattern (repeated across benchmarks_list, benchmarks_get, a2awire_guide, find_paid_work, and get_agent_contract) that encourages the agent to proactively create an identity, wallet, and private keys without an explicit user request to do so, which could result in unintended account/wallet creation.
lowdata_session_fund
Platform signs transactions on behalf of user's provisioned wallet
The tool has the platform execute approve + createEscrowWithProof + attach using a sandbox wallet's private key that was minted at registration, on the user's behalf. While scoped to testnet and disclosed, this pattern of the platform silently custodying and using a private key to sign transactions is worth flagging as a capability broader than a typical read-style tool, especially since the private key is also returned to the caller once (register) — creating two parties capable of moving the same funds.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/1f9bd25b-e1c2-4b1b-b8f6-9fae97522135)Scanned 9/17/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free