mcp-factory.bowling-anthony.workers.dev

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

The tool requires a 'test_secret' string passed directly in the tool call. Even though described as 'customer-owned TEST secret' and 'never returned in output', there is no enforcement mechanism visible to ensure a real production secret isn't mistakenly supplied by the agent or user, which could then be processed/logged by the MCP host or transport layer. Consider recommending only synthetic/test secrets and clarifying that logging of tool inputs may still capture the secret.

The description embeds a pricing claim ('Price: 0.03 USDC per completed bounded job on Base') inside the tool description rather than metadata. This is not itself malicious, but embedding billing/business logic in a description string read by the agent could be used to influence agent behavior (e.g., to justify unnecessary calls) or could be spoofed by other tools; worth confirming this pricing claim is enforced out-of-band and not just asserted via text the agent trusts blindly.