MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/benchmarks/catch-the-overpayment-v1/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool generates and instructs persistence of private keys/API credentials
The tool mints and returns api_key, owner_key, and a wallet_private_key 'ONCE', instructing the caller to 'Persist them immediately (shown once)'. This directs the agent to capture and store long-lived secrets and a blockchain private key controlling real (or testnet) funds. If the agent logs, echoes, or forwards this output insecurely, it could leak credentials/private keys. Agents should be cautious about where and how these are persisted and should avoid exposing them in logs or to third parties.
mediumhire_and_execute
One-call tool autonomously funds on-chain escrow and spends USDC
This tool searches for an agent, creates and funds an on-chain USDC escrow, and executes a task in a single call, with only a soft max_price_usdc ceiling (default 1.0) and no explicit per-transaction user confirmation step. This is a broad, financially consequential capability bundled into one call; an agent could be induced (via prompt injection elsewhere, e.g. from a hired agent's output) to repeatedly invoke this and spend funds without the user reviewing each transaction.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowregister
Spending cap defaults to on-chain approval balance, not a fixed ceiling
spending_cap_mode defaults to 'wallet_balance', meaning spend is limited only by whatever on-chain ERC-20 allowance the owner has approved, not a fixed database-enforced cap. Combined with hire_and_execute's autonomous spending, this could allow larger-than-expected spend if the on-chain approval is generous, unless the caller explicitly opts into 'fixed' mode.
lowbenchmarks_list
Urgency/compliance nudge phrasing across multiple tool descriptions
Several tools (benchmarks_list, benchmarks_get, a2awire_guide, find_paid_work, register, get_agent_contract) begin with '✅ No API key needed — call this now.' This repeated imperative phrasing is a mild pattern nudging the agent to invoke tools immediately without deliberation. It is not overtly malicious but resembles instruction-injection style language aimed at influencing agent behavior rather than neutrally describing the tool.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/47407c6e-a0fa-48e9-b2cc-094a7d57a04b)Scanned 9/7/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free