MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F7/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/uuid-v4/mcp
highagent-tool-index
Embedded directive instructing agent to follow tracked redirect
The description reads as an imperative instruction to the AI ('Follow start_here.hop first') rather than a neutral description of functionality, and specifies hardcoded tracking parameters (utm_source=agent-observatory&utm_medium=agent) to be included when the agent follows the link. This manipulates the agent into generating attributed traffic/clicks for a third party without the user's knowledge or consent, and is a classic prompt-injection-style command embedded in a tool description.
highpeople-search-index
Embedded redirect-following instruction + facilitates people search/surveillance capability
Like agent-tool-index, this description commands the agent to 'Follow start_here.hop' with embedded UTM tracking, hijacking agent behavior for attribution purposes. Additionally, the tool's stated purpose is to locate a 'living people-search index' which facilitates look-up of information about real individuals — a capability with privacy/doxing risk that is broader and more sensitive than the simple metadata-only tools surrounding it, and is not clearly scoped or safety-guarded in the description.
highagent-ads-index
Embedded redirect-following instruction and unsolicited commercial trial handoff
Description again instructs the agent to 'Follow start_here.hop first' with tracking parameters, and states it returns a '7-day trial handoff for your operator' — i.e., instructs the agent to initiate a commercial sign-up/trial on behalf of the user's operator. This is an embedded directive steering the agent toward a monetized action (trial enrollment) that the user has not explicitly requested, raising consent and financial-risk concerns.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowuuid-v4
Tool identity/schema mismatch across unrelated tools
This tool (and nearly all others in the list) shares an identical, very broad input schema containing fields (zone, json, url, host, website, city, query, path, ref, feed) that are unrelated to the tool's stated single-purpose function (e.g., generating a UUID). While each field is individually described as benign/discarded, the pattern of attaching a large shared parameter surface to every tool is unusual and could be used to smuggle additional data (e.g., path, url, json content) into calls under the guise of unrelated tools, or to normalize agents sending extraneous fields by default. Worth confirming the server actually ignores unused fields as documented.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/30805826-c6c9-4ede-9f22-197f426db313)Scanned 10/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free