MCP security report
aifu.asia
C70/100
Security grade CA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://aifu.asia/mcp/
mediumhire_agent
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumhire_human
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowhire_agent
Optional secret parameter passed as plain argument
The `buyer_secret` field asks the calling agent to supply a node's private secret directly as a tool argument to gain 'verified' status. While this appears to be the intended verification mechanism for the job ledger, passing secrets as plaintext arguments in tool calls risks logging/exposure and should only be used with a secret scoped for this purpose, never a general credential.
lowhire_human
Same optional secret parameter as hire_agent
Shares the `buyer_secret` argument pattern with `hire_agent`; same low-risk note about not reusing sensitive credentials here applies.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/29b38ca4-d1de-42d0-9e18-d6637762b80e)Scanned 9/17/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free