MCP security report
netmon.com
D46/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓36 tools scanned
https://netmon.com/mcp-demo/mcp
mediumeve_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumsnmp_walk_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
lowlog_severity_summary
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowsyslog_facets
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lownetflow_search
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lownetflow_raw_search
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowflow_summary
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowdevice_get
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowalerts_list
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowalerts_history
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowdevice_metric_summary
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowsnmp_test
SNMPv3 credentials passed through LLM-visible tool call
The snmpconfig parameter requires authpass/privpass (and community strings for v1/v2) to be supplied directly as tool arguments. This is necessary for SNMP functionality and not a malicious instruction, but it means device credentials pass through the model's context/transcript and any logging of tool calls, which is worth flagging as an operational credential-exposure risk rather than a true vulnerability in the tool description itself.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/2bdb362c-8d41-472c-82ec-4a73b00bdf57)Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free