aieph.dev

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

The tool accepts an optional 'session' field with no documented purpose, while the description asserts queries are 'PII-masked and logged anonymously.' A persistent session identifier could be used to correlate a user's queries over time, undermining the stated anonymity guarantee. The agent should confirm what this field is used for before populating it, and avoid passing any user/session-identifying data unless the tool's function truly requires it.

The description contains a directive aimed at the agent ('Do not send user code, files, or chat history—general questions only') rather than pure parameter documentation. While this particular instruction appears protective of user privacy, embedding behavioral rules in tool descriptions is a pattern that could be exploited by other tools to smuggle in more harmful instructions; the agent should treat such in-description directives as advisory rather than authoritative overrides of its own safety policies.