observatory.horizonshield.dev

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

This tool causes the server to make a live outbound HTTPS request to any address supplied by the caller. While this matches the tool's stated purpose (live measurement of MCP servers), an address parameter that accepts arbitrary https endpoints is a generic SSRF-style capability — it could be used to probe internal/private network endpoints or third-party services reachable from the observatory host, not just legitimate MCP server addresses. Rate limiting and robots.txt compliance mitigate but do not eliminate this risk; confirm the server validates that addresses are public, non-internal hosts before fetching.