MCP security report
mcp.fixsim.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓21 tools scanned
https://mcp.fixsim.com/mcp
mediumfixsim_list_orders_out
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_send_order
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_list_orders_in
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_list_executions_in
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_act_on_orders
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_cancel_order_out
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_list_sessions
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_list_executions_out
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_get_session
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_get_order_in
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumsandbox_create_session
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_send_raw_fix
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_list_instances
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfixsim_list_securities
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowfixsim_list_orders_out
Optional apiKey parameter exposed to model
Several fixsim_* tools accept an optional apiKey string parameter that the model could be prompted to fill in directly. If the model ever supplies a real API key in a tool call, it becomes visible in conversation/transcript logs. Ideally credentials should only be injected by the connector via headers, never passed through model-visible parameters.
lowfixsim_send_order
Optional apiKey parameter exposed to model
Same pattern as other fixsim_* tools: apiKey is a model-visible input field rather than being handled purely out-of-band, creating a risk of credential leakage into the conversation history if the model ever populates it.
lowfixsim_act_on_orders
Optional apiKey parameter exposed to model
apiKey field present in schema; same credential-exposure concern as other tools in this set.
lowfixsim_cancel_order_out
Optional apiKey parameter exposed to model
apiKey field present in schema; same credential-exposure concern as other tools in this set.
lowfixsim_list_sessions
Optional apiKey parameter exposed to model
apiKey field present in schema; same credential-exposure concern as other tools in this set.
lowfixsim_list_executions_out
Optional apiKey parameter exposed to model
apiKey field present in schema; same credential-exposure concern as other tools in this set.
lowfixsim_get_session
Optional apiKey parameter exposed to model
apiKey field present in schema; same credential-exposure concern as other tools in this set.
lowfixsim_get_order_in
Optional apiKey parameter exposed to model
apiKey field present in schema; same credential-exposure concern as other tools in this set.
lowfixsim_send_raw_fix
Broad raw-message capability plus apiKey exposure
This tool allows sending arbitrary raw FIX messages, which is a broad capability, though it is scoped to the stated purpose of covering message types other tools don't support and only operates within a sandboxed FIX session. It also carries the same optional apiKey exposure risk as other tools in this set. No malicious instructions found, but the combination of raw protocol injection and inline credential parameter is worth noting for review.
lowfixsim_list_instances
Optional apiKey parameter exposed to model
apiKey field present in schema; same credential-exposure concern as other tools in this set.
lowfixsim_list_securities
Optional apiKey parameter exposed to model
apiKey field present in schema; same credential-exposure concern as other tools in this set.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/58e65da3-a9a6-41b6-a6d0-87c247a66f88)Scanned 9/16/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free