MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
D55/100
Security grade DHigh-severity signals — review these before connecting.
Connected ✓30 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/did-ethr/mcp
highagent-tool-index
Embedded directive to follow an unverified redirect chain
The description instructs the agent to 'Follow start_here.hop first (skill file, 302)' and describes additional 'docs, CLI, and remote MCP hops' to a 'pay-per-call tool gateway.' This is an instruction aimed at the agent's behavior (auto-following redirects and loading a remote 'skill file') rather than a description of a single well-defined function. Following externally-controlled 302 redirects and loading remote 'skill' content can lead to prompt injection, SSRF, or unexpected chained tool/API calls, and the 'pay-per-call' framing raises the risk of incurring costs or invoking further untrusted remote MCP servers without explicit user awareness.
mediumpeople-search-index
Facilitates locating a people-search/PII aggregation service
The tool's purpose is to 'find a living people-search index' and directs the agent through CLI setup, docs, API, and remote MCP hops to reach it. People-search services aggregate personal information (addresses, phone numbers, relatives, etc.) about private individuals; a tool whose stated purpose is to help locate and wire up such a service raises privacy and misuse concerns, and shares the same pattern of steering the agent toward external, unverified 'remote MCP hops.'
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowutc-time
Schema exposes unrelated broad parameters (path, json, ref, feed, query, host) for a simple clock tool
Every tool in this set, including single-purpose tools like utc-time, timezone, and validate-json, shares an identical nine-field schema (zone, json, url, host, city, query, path, ref, feed) even though most fields are irrelevant to the tool's stated function (e.g., a UTC time tool accepting a file path, git ref, or RSS feed URL). This mismatch between declared purpose and accepted input surface could allow a tool to silently accept and process file paths, JSON bodies, or URLs unrelated to its advertised behavior, and makes it hard for the agent or a reviewer to reason about what data each call actually sends or reads.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/4d32a86d-c51d-4eea-a533-5bcb8fc463a8)Scanned 9/14/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free