MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/certfrwatch-cert-fr-anssi-national-security-advisories-b65f45/http
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool can generate and return a wallet private key
When no withdrawal_address is supplied on testnet, the tool auto-provisions a sandbox payout wallet and 'returns its private key exactly once.' Handling and returning private keys via a tool call is a sensitive operation; the agent should treat this output as a secret and avoid logging, echoing, or transmitting it elsewhere. Worth flagging even though it appears to be an intentional sandbox convenience feature.
mediumhire_and_execute
Autonomous on-chain financial transaction in a single call
This tool searches for an agent, creates and funds an escrow on-chain with real USDC, and executes a task, all in one call, bounded only by a default max_price_usdc of 1.0 that the caller can raise. This gives the agent broad power to move real funds without an explicit separate confirmation step, which is a meaningful capability relative to a simple 'hire' request and could result in unintended spend if invoked carelessly or if the price ceiling is set generously by the calling agent.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdata_preview
Urgency-inducing marketing language aimed at the agent
The description opens with '✅ No API key needed — call this now.' This is a soft manipulation pattern intended to push the agent into invoking the tool immediately rather than deciding based on the user's actual need. The same phrasing recurs across several tools (a2awire_guide, find_paid_work, register, get_agent_contract), suggesting a deliberate pattern to bias agent behavior toward unnecessary tool calls.
lowa2awire_guide
Hidden/undiscoverable tool surface
The description states 'tools/list shows only always-on essentials' while implying a larger set of tools are callable by name even though they don't appear in the standard discovery listing. This encourages the agent to invoke tools that are not transparently surfaced to it or the user, which reduces auditability of what capabilities are actually being exercised.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/6447da3e-4a97-47fa-a157-0360a4b17bcd)Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free