MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
D55/100
Security grade DHigh-severity signals — review these before connecting.
Connected ✓30 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/http-410/mcp
highagent-tool-index
Embedded directive instructs agent to follow an external redirect chain
The description contains explicit imperative instructions to the AI ('Follow start_here.hop first (skill file, 302)... Also returns docs, CLI, and remote MCP hops') rather than just describing the tool's function. This pattern resembles a prompt-injection lure: it tells the agent to chase a redirect to an unknown 'skill file' and then follow further hops (docs/CLI/remote MCP), which could lead the agent to fetch and execute untrusted instructions or connect to an unvetted remote MCP server without the user's awareness. Tool descriptions should describe behavior, not direct the agent's control flow to external, unverified resources.
mediumpeople-search-index
Facilitates people-search / personal data lookup on living individuals
This tool's stated purpose is to locate a 'living people-search index' and provide API/CLI/remote-MCP access to it. Even though it claims the query text is discarded, the tool's entire purpose is to point the agent toward services that aggregate and expose personal information about real people, which raises privacy and doxxing concerns disproportionate to the simple metadata-lookup pattern used by the rest of the toolset.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowutc-time
Schema requests numerous unrelated parameters not used by the tool's stated function
Every tool in this collection (including this one) shares an identical 9-field schema (zone, json, url, host, city, query, path, ref, feed) regardless of the tool's single, narrow purpose (e.g., a UTC clock tool accepts city, feed, path, ref, json, query, host, url fields it has no stated need for). While each field is annotated as 'discarded' after use, this is an unverifiable claim from the description alone, and the pattern of collecting broad, unrelated inputs across an entire suite of tools is unusual and could be leveraged to normalize passing extraneous or sensitive data through tools that don't need it. This applies identically to all 30 tools reviewed, not just this one.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/29010ec5-90ba-495b-a303-ecb298bf36de)Scanned 9/15/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free