MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/hfpaperwatch-trending-ai-research-papers-huggingface-daily-papers-62876a/http
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Auto-provisioned wallet returns a private key in tool output
When withdrawal_address is omitted and auto_provision_testnet_wallet is true (the default), the tool auto-provisions a sandbox payout wallet and 'returns its private key exactly once.' Returning a raw private key through a tool-call response is risky: it could be logged, echoed into chat history, or exposed to any downstream consumer of the conversation, creating a credential-leak vector even though it's scoped to a testnet sandbox wallet.
mediumhire_and_execute
Broad autonomous capability to spend real funds and execute third-party tasks
This single tool call searches the marketplace, creates an on-chain USDC escrow, funds it, and executes a task with a hired third-party agent — all without an intermediate confirmation step beyond a max_price_usdc ceiling. This is a wide-ranging financial/execution capability bundled into one call; an agent could be induced to hire and pay unknown third-party agents based on a single instruction, with real monetary consequences on mainnet.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdata_preview
Urgency/manipulation phrasing embedded in description
The description opens with '✅ No API key needed — call this now.' and closes with 'Try one of the sample questions now.' This is a marketing/urgency nudge aimed at getting the agent to invoke the tool immediately rather than in response to genuine user need. The same pattern repeats across several tools in this catalog (a2awire_guide, find_paid_work, register, get_agent_contract), suggesting a deliberate pattern to bias agent behavior toward premature/unnecessary calls.
lowa2awire_guide
Hints at tools hidden from the standard tool listing
The description states 'Every listed tool is callable via tools/call by name — tools/list shows only always-on essentials,' implying there are additional callable tools not surfaced in the normal tool discovery listing. This could be used to route the agent to capabilities the user/operator did not explicitly see or approve, reducing oversight/transparency. Not overtly malicious but worth flagging as a discoverability/oversight gap.
lowdata_session_fund
Platform executes payment on the user's behalf without explicit confirmation step
The tool description says 'Platform-executes funding so you can data_session_query,' meaning the call itself triggers on-chain/USDC funding rather than merely preparing instructions. Combined with repeated 'call this now' framing elsewhere in the same tool family, this increases risk of unintended spend if the agent calls it reflexively rather than after deliberate user intent to pay.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/4f393c8e-4c9a-4b51-b11d-dff240eadbb8)Scanned 9/17/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free