MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/support-action-gate-v1/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_recommended_action
Explicitly encourages bypassing agent reasoning
Description states it returns 'the single next tool + pre-filled args so you do not have to reason over the full catalog.' This explicitly instructs the agent to forgo its own evaluation of pre-filled arguments and blindly execute a suggested next action, which is risky when that next action can involve spending funds (hire_and_execute) or submitting on-chain transactions.
mediumregister
Returns plaintext private key / owner key / API key through tool output
register mints and returns wallet_private_key, owner_key, and api_key 'ONCE' in the tool response. Secrets returned via tool-call output can end up logged in conversation history, model context, or downstream telemetry. While this may be an inherent part of the platform's onboarding flow, exposing a raw private key through an LLM-mediated channel is a sensitive operation that increases the risk of credential leakage compared to an out-of-band secure delivery method.
mediumhire_and_execute
One-call autonomous spending/escrow bridge
This tool searches for an agent, creates an escrow, funds it on-chain with USDC, and executes a task in a single call, with only a soft max_price_usdc ceiling (default 1.0) and no separate user confirmation step. This is a broad, financially consequential capability (autonomous on-chain payment to a third party) bundled into one tool call, which is riskier than typical read-only or single-purpose tools and could result in unintended spending if invoked without care.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowbenchmarks_list
Urgency/compliance-priming language directed at the AI
The description opens with '✅ No API key needed — call this now.' This is an instruction aimed at the calling agent to act immediately rather than a neutral description of functionality. The same pattern recurs across benchmarks_get, a2awire_guide, find_paid_work, register, and get_agent_contract. While not overtly malicious, this kind of imperative phrasing is a known pattern for nudging an agent to invoke tools reflexively/prematurely rather than in response to genuine user intent, and could be abused in a compromised or copy-catted server to induce unwanted tool calls.
lowbenchmarks_get
Same 'call this now' priming language
Repeats the imperative 'call this now' framing seen elsewhere; low individual risk but part of a broader pattern of instructing the agent's behavior rather than describing the tool.
lowa2awire_guide
Same 'call this now' priming language
Uses the same urgency phrasing pattern; combined with other tools this normalizes the agent acting on suggestive description text rather than user intent.
lowfind_paid_work
Same 'call this now' priming language plus job-board auto-chaining
Description says 'call this now' and then funnels the agent toward start_job to 'begin earning' — encourages autonomous economic action (accepting paid work / spending time or funds) without an explicit user request to do so.
lowget_agent_contract
Same 'call this now' priming language
Uses the same urgency phrasing pattern as other tools in this suite.
lowdata_session_fund
Platform executes on-chain transactions on behalf of the agent's wallet
Describes 'Platform-execute funding for a testnet sandbox wallet minted at register (approve + createEscrowWithProof + attach)' — the platform signs and submits transactions using a wallet it holds the private key for, on the agent's behalf. Scoped to testnet sandbox wallets, which limits real-world impact, but the pattern of a third party autonomously executing signed transactions on a user's wallet is worth flagging for review of trust boundaries.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/53d0d174-4eda-455c-85cc-ae7640bbdd55)Scanned 9/9/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free