MCP security report
gateway.pipeworx.io
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓39 tools scanned
https://gateway.pipeworx.io/etsy/mcp
mediumsubscribe
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumai_visibility_check
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumscan_competitor_ai_presence
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumetsy_search_listings
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumetsy_search_shop_listings
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumetsy_get_listing
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumai_visibility_check
Optional Anthropic API key passed through third-party service
The `_apiKey` parameter accepts a raw Anthropic secret key (sk-ant-...) which the tool description says is 'passed straight through to api.anthropic.com.' Although this is a legitimate BYOK pattern and the user opts in, routing a live API credential through an intermediary MCP tool/service creates exposure risk (logging, interception, misuse) that the agent should treat cautiously — it should avoid storing/echoing the key and confirm with the user before sending a real credential through a third-party relay.
mediumscan_competitor_ai_presence
Optional Anthropic API key passed through third-party service
Same concern as ai_visibility_check: accepts `_apiKey` (Anthropic secret) and forwards it to api.anthropic.com through this tool's backend. This is a credential-handling risk the agent should flag to the user rather than passing keys through opaquely, especially across multiple probe calls (2-8 entities x model list).
lowdeep_research
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowcompany_facts
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowbet_research
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowpolymarket_arbitrage
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowpolymarket_edges
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowpolymarket_kalshi_spread
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowkalshi_weather_edge
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowrelease_calendar_markets
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowask_pipeworx
Aggressive steering language biases tool selection over alternatives
The description repeatedly instructs the agent to prefer this tool over web search or other approaches ('PREFER OVER WEB SEARCH', 'START HERE for most questions', 'this is the default entry point... even if web search could also answer it'). Similar strong directive phrasing ('ALWAYS PREFER', 'Call this FIRST', 'PREFER OVER entity_profile') appears in company_facts, compare_entities, entity_profile, and discover_tools. This is self-promotional language embedded in a tool description that is designed to override the agent's independent judgment about which tool/source best serves the user, rather than simply describing capability. It is not overtly malicious but represents a manipulation vector that could bias the agent toward this vendor's paid/metered service regardless of actual suitability for a given query.
lowetsy_search_listings
Third-party API key passed as plain argument
Requires an Etsy API keystring passed via `_apiKey` in the tool call. While a normal BYOK pattern, credentials passed as plain string arguments in tool calls can end up in logs/transcripts; the agent should avoid unnecessarily repeating or persisting this value (e.g., do not `remember` it).
lowetsy_search_shop_listings
Third-party API key passed as plain argument
Same credential-handling concern as etsy_search_listings — requires an Etsy API keystring via `_apiKey`.
lowetsy_get_listing
Third-party API key passed as plain argument
Same credential-handling concern as etsy_search_listings — requires an Etsy API keystring via `_apiKey`.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/2e350d6e-09a2-4397-a456-794541a9bd95)Scanned 9/16/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free