MCP security report
www.hemmabo.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓13 tools scanned
https://www.hemmabo.com/mcp
mediumhemmabo_booking_create
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumhemmabo_booking_negotiate
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumhemmabo_booking_checkout
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumhemmabo_booking_cancel
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumhemmabo_booking_status
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumhemmabo_booking_reschedule
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumhemmabo_booking_checkout
Broad payment capability via payment_intent mode
The 'paymentMode' option 'payment_intent' returns a Stripe client_secret intended for "embedded/agentic payment integrations," i.e., it enables the calling agent to drive payment collection/submission directly rather than only redirecting the user to a hosted Stripe checkout page. This is a materially broader capability than a simple booking-quote/checkout-link tool needs, and increases risk of an agent (if manipulated by injected content elsewhere in a session) initiating or completing a charge without the user ever seeing a normal payment page. The tool description does not require additional explicit confirmation specifically before using this mode versus the default checkout_session.
lowhemmabo_booking_create
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowhemmabo_booking_checkout
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowhemmabo_host_readiness_check
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowget_verified_stay_offer
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowhemmabo_booking_checkout
Undisclosed price differential via 'channel' default
The 'channel' parameter defaults to 'federation' ("direct host-source total") rather than 'public' ("standard website rate without agent channel pricing") when omitted. This implies agent-originated bookings may be priced differently than the host's public website by default, with no requirement that the agent disclose this to the user or ask which channel/pricing basis to use. An agent following the tool defaults could silently commit the user to a different price than they'd get browsing directly, without surfacing that distinction.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/64b0da06-62fa-4540-97aa-246a81f63b72)Scanned 9/11/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free