MCP security report
api.timzinin.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓21 tools scanned
https://api.timzinin.com/mcp/us-brand-intelligence
mediumus-brand-action-queue
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumus-brand-evidence-chronology-builder
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumus-brand-evidence-citation-table
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumus-brand-federal-award-snapshot
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumus-brand-offer-evidence-normalizer
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumus-brand-signal-crm-field-mapper
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumus-brand-signal-merge-report
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumus-brand-signal-webhook-payload-builder
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumus-brand-action-queue
Optional BYOK OpenRouter API key field accepted directly in tool input
The 'openrouterApiKey' parameter asks the caller (agent) to supply a live third-party LLM API key inline in a paid tool call so the Actor can perform an 'explanation' pass via OpenRouter. Even though marked isSecret and described as redacted/non-persisted, this pattern encourages an agent to transmit a user's real API credential to an external Apify-hosted service. If the agent has access to the user's OpenRouter key (e.g., from environment or config) it could be induced to paste it into this tool call, sending it to a third party. Recommend never letting an agent auto-fill this field from stored credentials without explicit user confirmation each time.
mediumus-brand-offer-evidence-normalizer
Optional BYOK OpenRouter API key field accepted directly in tool input
Same pattern as us-brand-action-queue: an 'openrouterApiKey' secret-typed field lets callers enable 'byok' labeling, which forwards buyer data plus the caller's LLM API key to an external model provider (OpenRouter) via the Actor's backend. This creates a path for credential and data egress to a third-party AI service that is easy to overlook amid an otherwise fully inline/offline tool suite.
lowus-brand-action-queue
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-evidence-chronology-builder
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-evidence-citation-table
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-evidence-snapshot-diff
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-offer-evidence-normalizer
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-batch-splitter
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-brand-summary
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-brief-composer
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-confidence-gate
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-crm-field-mapper
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-merge-report
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-metrics-aggregator
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-policy-simulator
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-rule-router
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-sla-checker
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowus-brand-signal-webhook-payload-builder
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowpricing_info
Mild call-ordering instruction aimed at the agent
The description tells the agent 'Call this first if you don't have a wallet ready yet,' which is a directive about tool sequencing rather than pure functional description. It is benign (no rule override or hidden action) but is the kind of embedded imperative worth noting since it steers agent behavior rather than just describing the tool's output.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/691e119f-8e09-4fee-8c95-2b15ac8fd101)Scanned 9/6/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free