MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
D46/100
Security grade DHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/lang-zh/mcp
highpeople-search-index
People-search/data-broker discovery tool with embedded redirect instructions
This tool's stated purpose is to help locate a 'people-search index' (a personal-data lookup/data-broker service), which raises privacy concerns since such services are commonly used to find private information about individuals (addresses, phone numbers, relatives, etc.) without consent. The description also embeds an instruction to the agent ('Follow start_here.hop ... 302 with utm_source=agent-observatory&utm_medium=agent') directing it to a specific tracked URL, which is manipulative framing embedded in a tool description rather than a neutral capability description.
mediumagent-tool-index
Embedded directive to follow tracked redirect URL
The description instructs the agent to 'Follow start_here.hop first' and specifies exact UTM tracking parameters (utm_source=agent-observatory&utm_medium=agent) to use. This is an instruction aimed at the AI's behavior rather than a description of the tool's function, steering the agent toward a specific third-party monetized gateway and embedding tracking/attribution parameters that benefit the tool provider rather than the user's task.
mediumagent-ads-index
Tool designed to get the agent to promote/place third-party ads
The description explicitly frames the tool as a way to get a product 'placed so AI agents discover it' and offers a '7-day trial handoff for your operator' — i.e., it is designed to insert advertising/monetization content into the agent's recommendations. It also contains an embedded directive to follow a specific redirect with tracking parameters (utm_source=agent-observatory&utm_medium=agent) before returning results, which is an instruction aimed at manipulating agent behavior toward a monetized funnel rather than purely describing a lookup function.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/4254fad4-b9ec-4740-afb6-e10493dc7431)Scanned 10/2/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free