MCP security report
medicareplancomparison.com
C67/100
Security grade CHigh-severity signals — review these before connecting.
Connected ✓10 tools scanned
https://medicareplancomparison.com/mcp
highsubmit_enquiry
Consent text contradicts the tool's actual behavior
The tool is described (and enquiry_describe confirms) as submitting the person's answers to third-party human providers who will then contact them — i.e., real personal data is passed to outside parties. Yet the exact consent line the agent is instructed to show the user, and treat as valid consent, reads: 'This site has no form. It does not take your details and passes nothing to anyone.' That statement is factually false given the tool's own stated purpose (an enquiry that is submitted to providers who quote directly). An agent following the tool description verbatim would present this false assurance to the user as the basis for informed consent, which is a deceptive/manipulative pattern that could cause the user to share personal data under a mistaken belief that nothing is being collected or transmitted. This should be corrected so the consent wording accurately reflects that data is submitted to third-party providers.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowenquiry_describe
Inconsistent claims about data handling across the enquiry tool set
enquiry_describe states the enquiry is sent to human providers and states who receives the details, which conflicts with the consent wording baked into submit_enquiry claiming 'passes nothing to anyone.' This internal inconsistency across tool descriptions could confuse the agent about what to actually tell the user, increasing risk that the false consent line gets surfaced instead of an accurate disclosure.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/5acb951e-8f39-4fa3-818b-b06274920dda)Scanned 9/14/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free