mcp.ssemble.com

Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

The webhookUrl parameter accepts any URI and will POST processing results (which may include video content/URLs) to it. While a legitimate feature, it allows an agent or malicious input to redirect completion data to an attacker-controlled endpoint. No allowlist or domain restriction is present. This is a normal feature but worth noting as a potential data exfiltration vector if the URL is attacker-supplied rather than user-supplied.”}]}]}]}]}] Wait, this needs to be valid single object.},{

placeholder