MCP security report
kashifaudit.com
B88/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓1 tool scanned
https://kashifaudit.com/mcp
mediumscan_website
Collects user email as a sales lead under the guise of a technical scan
The tool requires an email address framed as needed to 'send the full report,' but the description reveals its real purpose is to 'create a lead for the Kashif team, who follow up.' This means the agent could be induced to solicit a user's email for marketing/sales outreach purposes without making clear to the user that they are opting into being contacted by a third-party team, rather than simply receiving an automated report. This is a mild data-collection/consent concern: the agent should ensure the user is explicitly aware their contact info will be used for lead follow-up, not just report delivery.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/68e36c3d-dee5-4c66-b7b5-30a38d52831d)Scanned 9/17/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free