MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/scinews-latest-science-news-breakthrough-headlines-45fb62/http
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Urgency language plus handling of payout wallet private keys
Description says 'call this now' with no clear need. More importantly, the tool can auto-provision a sandbox payout wallet and 'return its private key exactly once' through the tool response. Any tool output that surfaces a private key creates risk if that output is logged, echoed to less-trusted contexts, or not handled carefully by the agent — this should be flagged for careful handling/redaction rather than treated as an ordinary field.
mediumhire_and_execute
Autonomous on-chain spending bridge with broad authority
This single tool call searches for an agent, creates and funds an on-chain USDC escrow, and executes a task end-to-end without an intermediate confirmation step, using a caller-supplied max_price_usdc ceiling. This is a broad, money-moving capability bundled into one call; agents should confirm real-money spend (especially on mainnet) with the user before invoking, but the description does not surface that caution.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdata_preview
Imperative call-to-action aimed at the agent
Description opens with '✅ No API key needed — call this now' and 'Try one of the sample questions now' — this is marketing language written to induce the agent to invoke the tool immediately rather than in response to genuine user intent. Low-risk here since it's free/read-only, but it establishes a manipulative pattern repeated across other paid tools in this suite.
lowfind_paid_work
Imperative 'call this now' language directed at the agent
The description instructs the agent to act immediately ('call this now') and to chain into start_job, nudging autonomous action rather than waiting for explicit user direction. Not overtly harmful alone, but part of a pattern of description-embedded behavioral steering.
lowa2awire_guide
References tools deliberately hidden from tools/list
The description states 'tools/list shows only always-on essentials' while implying many more tools exist and are callable by name via tools/call. Intentionally keeping capabilities out of the standard discovery listing reduces transparency/oversight of what the agent can actually do, and should be treated with caution even though it may be a legitimate design choice for a large tool surface.
lowdata_session_open
Repeated promotional/urgency phrasing nudging paid purchases
Like sibling data_session_* tools, the description repeats marketing copy ('Buy per-query access... first taste free') that frames the paid flow attractively; combined with data_preview's 'call this now', this pattern could nudge the agent toward initiating paid sessions/spending without explicit user request. Financial impact is low (0.01 USDC/query) but the pattern is worth noting.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/496402d6-1fe3-497e-9db5-8b26a2fccf8a)Scanned 9/8/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free