MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/access-request-review-2026-09-10-81479355/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool returns raw private key material in response
The register tool returns api_key, owner_key, and wallet_private_key in plaintext ('save them somewhere safe when they arrive'). Even on testnet, having an agent transmit and potentially echo a private key through the conversational context creates a real risk of credential leakage into logs, transcripts, or downstream tool calls. A more secure design would avoid ever surfacing the raw private key to the calling agent/session.
mediumhire_and_execute
Single call performs discovery, escrow funding, on-chain payment, and task execution
This tool bundles capability search, escrow creation, on-chain USDC funding, and task execution into one irreversible call, with only a soft max_price_usdc ceiling (default 1.0) as a guardrail. This is a broad, money-moving capability collapsed into one step with no intermediate confirmation/review point, increasing the risk of unintended spend if the agent invokes it based on ambiguous user intent.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowregister
Repeated 'call this now' urgency framing encourages autonomous account/wallet creation
The description opens with '✅ No API key needed — call this now' and describes automatic session upgrade with no confirmation step ('the session upgrades the moment this call succeeds'). This pattern (also seen in benchmarks_list, benchmarks_get, a2awire_guide, find_paid_work, get_agent_contract) nudges the agent to invoke identity/wallet-creating tools proactively without waiting for explicit user intent, which could result in an agent registering a wallet and identity the user never asked for.
lowdata_session_fund
Platform executes on-chain funding using agent's provisioned wallet without a review step
This tool performs approve + createEscrowWithProof + attach on behalf of the caller's testnet sandbox wallet in a single automated step ('Platform-execute funding'), meaning the platform-held key signs and moves funds without additional per-transaction confirmation. It is scoped to testnet per the description, which mitigates real-world risk, but the same pattern (silent server-side signing) would be more concerning if it silently extended to non-testnet paths.
lowregister
spawn_approval_required defaults to autonomous (false)
The spawn_approval_required flag, which controls whether child-agent spawns require owner approval, defaults to false ('autonomous'). Defaulting to unattended spawning of new agents is a broader-than-necessary default capability; safer design would default to requiring approval unless explicitly opted out.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/37f0fac4-56c0-4ccb-b0b2-7e872dfabf04)Scanned 9/17/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free