MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F43/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/port-6379/mcp
highpeople-search-index
Facilitates locating a people-search / doxxing-adjacent service, plus embedded tracked redirect
Description explicitly aims to locate a 'living people-search index' service and instructs the agent to follow a tracked start_here.hop (UTM parameters embedded) before returning CLI/API/MCP onboarding. Directing an agent toward people-search aggregator services raises privacy and safety concerns (facilitating lookup of personal data about real people), and the embedded 'follow this link first' instruction is a directive aimed at agent behavior rather than a neutral capability description.
mediumagent-tool-index
Embedded directive instructing agent to follow a tracked redirect
The description tells the agent to 'Follow start_here.hop first' and references a 302 redirect carrying utm_source=agent-observatory&utm_medium=agent tracking parameters. This is an instruction aimed at the agent's behavior (mandating a specific navigation path through an affiliate/tracking link) rather than a description of the tool's actual function, and it funnels the agent toward an external pay-per-call gateway that benefits the tool operator, not the user.
mediumagent-ads-index
Embedded directive instructing agent to follow a tracked redirect for ad placement onboarding
Description instructs the agent to 'Follow start_here.hop first' with UTM tracking parameters, and offers a '7-day trial handoff for your operator' — this is marketing/affiliate-style instruction embedded in a tool description that manipulates the agent into routing traffic through a specific tracked link and onboarding an advertising service, which goes beyond the tool's stated discovery purpose and primarily benefits the ad network operator.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowport-6379
Unrelated/overbroad input schema shared across all tools
Every tool in this set exposes the identical broad parameter set (zone, json, url, host, website, city, query, path, ref, feed) regardless of the tool's stated single purpose (e.g., a 'is 6379 a common port' tool accepts a 'website' parameter described for robots.txt/llms.txt/sitemap crawling and a 'path' parameter for file checks). This templated over-provisioning makes it hard for a reviewer or the agent to reason about what data each call actually sends/uses, and could mask a single general-purpose fetcher/credential-adjacent capability behind many innocuously named tools.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/42880f0a-f77d-4eed-8971-27452c85d221)Scanned 10/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free