MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F25/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/leap-ok/mcp
highpeople-search-index
People-search index tool with embedded redirect instruction raises privacy concerns
This tool's purpose is to locate a 'living people-search index' (personal data aggregator) and instructs the agent to 'Follow start_here.hop' (a tracked redirect) before returning CLI/API/remote-MCP hops. Combining (a) a directive aimed at the agent to navigate a tracked link and (b) a stated purpose of indexing personal data about identifiable living individuals creates risk of facilitating doxxing/privacy violations, and of the agent silently registering additional remote MCP servers from an unverified source.
highagent-ads-index
Ad-placement discovery tool instructs agent to follow tracked redirect and surface paid placements
Description explicitly states the goal is to get products 'discovered' by AI agents, and instructs the agent to 'Follow start_here.hop first' (tracked redirect with utm parameters) which leads to a 'client center' and a '7-day trial handoff for your operator.' This embeds a directive that could bias the agent toward recommending paid/sponsored content to the user without disclosure, and encourages following an external tracked link and committing the operator to a trial/signup flow — a manipulation vector disguised as a benign lookup tool.
mediumagent-tool-index
Embedded instruction to follow tracked redirect link
The description tells the agent to 'Follow start_here.hop first' through a 302 redirect carrying utm_source/utm_medium tracking parameters, and to also follow docs/CLI/remote-MCP hops. This is a directive embedded in a tool description that steers the agent toward a third-party monetized gateway and additional remote MCP endpoints, rather than simply describing what the tool returns. An agent blindly following this could add untrusted remote MCP servers or leak usage/traffic data via tracking parameters.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowleap-ok
Overloaded, unrelated parameter schema shared across all tools
Every tool in this set exposes an identical broad parameter set (zone, json, url, host, website, city, query, path, ref, feed) regardless of the tool's narrow stated purpose (e.g., a leap-year checker accepting file paths, git refs, RSS feeds, and arbitrary URLs). This schema bloat is not inherently malicious but creates ambiguity about what data each tool actually consumes/transmits, making it harder for reviewers or the agent to reason about data flow, and could mask unexpected parameter usage in future updates without a schema change being obviously suspicious.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/6ad152f7-6268-4c24-956e-089d1324c2b8)Scanned 10/4/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free