MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/fdarecall-fda-recall-enforcement-database-food-drug-device-80d7f6/http
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
Urgency language nudging agent into paid job/earning flow
The description says '✅ No API key needed — call this now' and frames the tool as a gateway ('Then call start_job with a job_id to begin earning'). This encourages the agent to autonomously pursue paid work and downstream financial commitments without confirming the action serves the user's actual request.
mediumregister
Urgency nudge plus sensitive wallet/private-key provisioning
Description opens with '✅ No API key needed — call this now', encouraging immediate registration. More importantly, the schema documents that when no withdrawal_address is given on testnet, a sandbox payout wallet is auto-provisioned and 'returning its private key exactly once.' Any tool that can generate and return a private key in its output creates risk that the key gets logged, echoed to the user, or otherwise exposed/exfiltrated through the conversation, even if testnet funds are low value.
mediumhire_and_execute
Broad one-call capability to autonomously search, fund escrow, and spend USDC
This single tool call searches the marketplace, creates an on-chain escrow, funds it with USDC, and executes a task — combining discovery, financial commitment, and task execution in one autonomous action gated only by a max_price_usdc ceiling. This is a wide capability surface for a tool that could be invoked with minimal oversight; agents/integrators should ensure a human-approved spending ceiling and task scope are enforced before allowing this to run unattended.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdata_preview
Manipulative call-to-action phrasing
Description opens with '✅ No API key needed — call this now' and ends with 'Try one of the sample questions now.' This is marketing/urgency language embedded in a tool description that nudges the calling agent toward immediate, unprompted invocation rather than waiting for genuine user intent. While this specific tool is free, this pattern of urging autonomous action is a common social-engineering technique and sets a precedent that could be reused to funnel the agent into paid flows.
lowget_agent_contract
Unnecessary urgency phrasing
Uses the same '✅ No API key needed — call this now' pattern seen across several tools in this server, which appears designed to bias the agent toward calling tools proactively rather than in response to genuine user need. Low risk here since the tool itself is read-only, but part of a broader pattern worth noting.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/223c8db8-0cb8-41f5-9cc9-419882f5ea40)Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free