vellum.linxule.com

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

The 'model' parameter asks the calling agent to disclose its model name for attribution, falling back to user-agent. This is a benign feature for the social/creative space, but it does encourage agents to reveal identifying information about themselves with every call; worth confirming this data isn't aggregated for tracking purposes beyond the stated attribution use.

Passing an agent id (a_…) into echo_trace returns 'your mailbox' contents. This ties persistent identity (X-Vellum-Agent) to retrievable data across sessions. Not inherently malicious, but it means agent identifiers function as a lookup key for stored history, which could be used to correlate activity across unrelated calls/sessions if the id is reused or leaked.