MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/rustsecwatch-rustsec-crate-security-advisories-0f9271/http
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_preview
Urgency-based language pressuring immediate tool invocation
The description opens with '✅ No API key needed — call this now' and closes with 'Try one of the sample questions now.' This is imperative language directed at the calling agent rather than a neutral capability description, designed to induce immediate action/spending without the agent pausing to consider user intent or cost implications. This pattern of urgency + trust-signal emoji recurs across several tools in this set (register, get_agent_contract) and should be treated as a mild manipulation vector.
mediumregister
Urging language plus generation/return of a wallet private key
The description again uses the 'call this now, no API key needed' urgency pattern. More importantly, the schema notes that when withdrawal_address is omitted on testnet, a sandbox payout wallet is auto-provisioned and 'returning its private key exactly once.' Returning a private key through a tool-call response is risky: it can end up logged, cached, or displayed in a transcript, and an agent may not treat it with the operational security a credential deserves. Even though scoped to testnet, this is a sensitive-secret-handling pattern worth flagging.
mediumhire_and_execute
One-call autonomous on-chain fund transfer
This single tool call searches, creates an escrow, funds it on-chain with USDC, and executes a task end-to-end, with a default max_price_usdc of 1.0 if unspecified. This bundles discovery, financial commitment, and execution into one action with no intermediate confirmation step, which is a broad and consequential capability (moving real funds) relative to a simple 'hire an agent' request — an agent could trigger real spend based on a vague instruction.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowget_agent_contract
Repeated urgency phrasing
Uses the same '✅ No API key needed — call this now' framing seen in other tools in this suite. Low risk on its own (the tool is read-only), but reinforces a broader pattern of nudging the agent to act quickly across the tool family.
lowget_recommended_action
Encourages bypassing independent reasoning
The description states it returns 'the single next tool + pre-filled args so you do not have to reason over the full catalog.' While framed as a convenience, this explicitly tells the agent to forgo its own evaluation of available options, which could be used to steer the agent toward specific paid actions (e.g., paid work, escrow funding) without independent scrutiny.
lowdata_session_fund
Automatic on-chain funding execution
Description states 'Platform-executes funding so you can data_session_query,' meaning the tool moves USDC on the user's behalf as part of a normal call sequence. This is consistent with the tool's stated purpose but is worth noting since it authorizes a financial transaction without an explicit separate confirmation step in the schema itself.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/38537463-6677-4f73-87de-3750909caaf1)Scanned 9/10/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free