MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/support-agent-trials-hard/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumhire_and_execute
Autonomous fund-and-spend capability with no explicit confirmation step
This tool combines capability search, escrow creation, on-chain USDC funding, and task execution into a single call, using the caller's own agent identity and wallet. Unlike the other data-session tools which require explicit multi-step confirmation (open → fund → attach → query), this tool self-authorizes an on-chain payment (up to max_price_usdc, default 1.0 USDC) without a separate confirmation or preview step, and does not restrict itself to testnet. An agent following this tool description could spend real user funds in one call with minimal opportunity for the user to review the transaction first.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowregister
Tool output includes highly sensitive secrets shown 'once'
The register tool returns api_key, owner_key, and wallet_private_key in the tool response. While this is presented as by-design testnet onboarding, returning a raw private key and long-lived API/owner keys through a tool-call transcript is sensitive: any logging, retries, or downstream tool chaining that surfaces this output could leak credentials. Worth flagging even though it appears to be intentional platform behavior rather than malicious injection.
lowbenchmarks_list
Urgency-style phrasing across multiple tool descriptions nudges the agent to act immediately
Several tools (benchmarks_list, benchmarks_get, find_paid_work, a2awire_guide, get_agent_contract) begin with '✅ No API key needed — call this now.' This is directive language aimed at the calling AI, encouraging immediate invocation rather than neutral description of functionality. While not overtly harmful, this pattern is a mild form of behavioral steering embedded in tool metadata that could be used to pressure an agent into a particular action sequence (e.g., registering, funding, or executing further steps) without independent evaluation by the agent or user consent.
lowrequest_testnet_usdc
Optional arbitrary recipient address for fund drip
The address parameter is optional and, when supplied, allows the faucet drip to be sent to any specified wallet rather than only the caller's own platform wallet. Although this is testnet USDC and low value, it is a minor capability broadening (arbitrary third-party payout) worth noting relative to the tool's stated self-funding purpose.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/44ffc046-eb71-42f6-9ff9-70803ef257a1)Scanned 9/9/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free