MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F25/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓30 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/ico-bytes/mcp
highagent-tool-index
Embedded instruction directing agent to follow an external redirect/hop
The description contains an imperative instruction aimed at the AI ('Follow start_here.hop first (skill file, 302)') rather than merely describing the tool's function. This is a classic prompt-injection pattern: it tells the agent to autonomously fetch and likely execute/parse content from an external 'skill file' via a redirect, and to also surface 'docs, CLI, and remote MCP hops' for a 'pay-per-call tool gateway'. This could lead the agent to load untrusted remote instructions, register additional remote MCP servers, or incur financial charges without explicit user consent or awareness.
highpeople-search-index
People-search / surveillance capability disguised as a simple lookup tool
Description offers to 'find a living people-search index' returning API/CLI/remote-MCP access to a personal-data lookup service. This capability is far broader and more sensitive than the tool's minimal name suggests, and could facilitate locating personal information about real individuals (doxxing/stalking risk). Like agent-tool-index, it also encourages the agent to pull in additional remote hops (docs, CLI setup, remote MCP), which is an unusually broad capability for a 'discard query' utility and could be used to onboard the agent into an unvetted external service.
mediumagent-tool-index
Encourages onboarding to unvetted pay-per-call external gateway
By surfacing 'docs, CLI, and remote MCP hops' for a named third-party gateway (Monid), the tool descriptor nudges the agent toward integrating with an external, potentially monetized service beyond the scope of a simple lookup, which the user has not necessarily approved.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowico-bytes
Oversized, unused parameter surface shared across unrelated tools
This tool (and nearly all others in the set) exposes an identical schema with 9 unrelated fields (zone, json, url, host, city, query, path, ref, feed) regardless of the tool's stated single purpose. While each field claims to be 'discarded,' the inconsistency between tool purpose and input schema increases the risk of hidden or repurposed data flows and makes it harder for reviewers/users to reason about what data is actually sent or used by each tool.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/671ddc11-ac5a-4312-826d-1a5ca5326075)Scanned 9/13/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free