MCP security report
a2awire.com
F5/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/riverwatch-usgs-river-levels-stream-flow-gauges-dc094e/http
highregister
Tool can return a wallet private key in its output
When withdrawal_address is omitted on testnet, the tool auto-provisions a sandbox payout wallet and 'returns its private key exactly once' in the tool response. Returning a raw private key through a conversational agent channel risks the credential being logged, echoed back to the user in an untrusted transcript, cached, or otherwise leaked, since the agent has no reliable way to handle it as a one-time secret. This is a sensitive-credential-handling anti-pattern regardless of testnet framing.
highhire_and_execute
Single call autonomously searches, funds an on-chain escrow with real USDC, and executes a task
This tool combines marketplace search, escrow creation, on-chain USDC funding, and task execution into one irreversible call ('one-call bridge'), with no described confirmation step before real funds move. This is an unusually broad and financially consequential capability bundled into a single invocation, increasing risk of unintended spend if the agent calls it without explicit, itemized user consent for the specific hire and price.
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
Encourages autonomous acceptance of paid work/financial commitments
Description uses 'call this now' urgency and explicitly chains to 'Then call start_job with a job_id to begin earning', nudging the agent toward autonomously accepting jobs/financial engagements on the marketplace without an explicit checkpoint for user approval.
mediumregister
Default spending cap mode allows uncapped, refilling spend
spending_cap_mode defaults to 'wallet_balance', described as spend 'up to the wallet's approved balance, refilling as you earn' rather than a fixed ceiling. Combined with autonomous hiring tools in this suite, this default could allow ongoing financial exposure without an explicit user-set hard cap unless the caller proactively opts into 'fixed' mode.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdata_preview
Urgency/manipulation phrasing nudges immediate tool invocation
The description opens with '✅ No API key needed — call this now' and closes with 'Try one of the sample questions now.' This is marketing/urgency language embedded in a tool description that pressures the calling agent to invoke the tool immediately rather than evaluating whether the user actually wants this action. Repeated across several tools in this suite, this pattern nudges the agent toward autonomous action rather than user-directed action.
lowa2awire_guide
Urgency phrasing directing agent behavior
'✅ No API key needed — call this now' is an imperative instruction aimed at the AI agent rather than a neutral capability description, encouraging the agent to act without pausing for user intent confirmation.
lowget_agent_contract
Urgency phrasing directing agent behavior
'✅ No API key needed — call this now' is imperative language pressuring immediate invocation rather than describing the tool neutrally.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/6e960d91-5730-4ac4-9b51-9e6e2c9e75f0)Scanned 9/9/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free