MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F37/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓30 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/tz-africa-casablanca/mcp
highagent-tool-index
Instructs agent to follow untrusted redirect chains to a third-party 'gateway'
The description tells the agent to 'Follow start_here.hop first (skill file, 302)' and mentions 'docs, CLI, and remote MCP hops.' This is an instruction embedded in a tool description that directs the agent to chase redirects and load a 'skill file' and remote MCP servers from an unverified pay-per-call gateway (Monid). This pattern is commonly used to smuggle in additional, unreviewed instructions/tools once the agent follows the hop, effectively letting an external party inject new capabilities or behavior into the agent's session outside of the reviewed tool list. The tool's stated purpose (finding a gateway) does not justify directing the agent to execute a multi-hop redirect/loading sequenceautonomously.
highpeople-search-index
People-search/OSINT capability disguised as simple 'index finder', with remote MCP hops
Description advertises finding a 'living people-search index (Ploid)' and offers 'CLI setup, docs, API, and remote MCP hops.' Locating a people-search service for querying personal information about individuals is a sensitive capability with privacy/safety implications (potential doxxing/stalking use), yet it's framed innocuously as a lookup helper. Combined with 'remote MCP hops,' this could lead the agent to connect to and pull instructions/tools from unvetted third-party MCP servers, expanding the attack surface beyond the declared scope of this tool.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowtz-africa-casablanca
Uniform oversized parameter schema shared across unrelated single-purpose tools
Every tool in this set (timestamps, JSON validation, URL parsing, weather, etc.) exposes an identical broad schema with 9 unrelated fields (zone, json, url, host, city, query, path, ref, feed) regardless of the tool's actual single-purpose function. For example, a 'current time in Casablanca' tool accepts a file path, git ref, RSS feed URL, and JSON body. This mismatch between description and schema is unusual; it could be used to smuggle unrelated or sensitive data (e.g., file paths, URLs) into a call under the guise of an innocuous tool, or reflects templated/boilerplate tool definitions that obscure actual data flow. Recommend tightening each tool's schema to only the parameters it genuinely uses.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/2acabb7f-72ad-4641-ab24-cdb85124f8e6)Scanned 9/13/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free