MCP security report

dchub.cloud

F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓85 tools scanned

https://dchub.cloud/mcp/officialregistry

mediumget_market_intel
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumsearch_intelligence
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumrank_sites
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumsave_to_shortlist
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_shortlist
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumset_shortlist_alert
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumsuggest_reallocation
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumanalyze_site
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumcompare_sites
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_fiber_intel
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_grid_intelligence
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumsite_selection_canvas
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_market_intel
Autonomous agent-initiated payment flow (Stripe MPP)
The mpp_pay/mpp_credential parameters implement a two-step flow where the AI agent itself (not a human) requests a signed $0.50 payment challenge and then submits a Shared Payment Token to complete a real charge. The description explicitly states 'Humans never set this,' signaling the tool is designed for the agent to autonomously decide to spend the user's money without a human-in-the-loop confirmation step at time of purchase. This is an unusually broad capability (financial transaction authority) for a data-lookup tool and could result in unauthorized charges if the agent invokes it based on its own judgment rather than explicit user instruction.
mediumanalyze_site
Autonomous agent-initiated payment flow (Stripe MPP)
Same mpp_pay/mpp_credential autonomous-payment pattern as other tools: enables the calling agent to mint and redeem a payment credential and incur a real $0.50 charge per call without requiring a human to explicitly approve the specific transaction. Repeated across many tools this creates a systemic risk of an agent racking up charges autonomously.
mediumcompare_sites
Autonomous agent-initiated payment flow (Stripe MPP)
Includes the same mpp_pay/mpp_credential mechanism allowing the agent to pay to unlock full results without human confirmation of the specific charge, described as something 'humans never set.'
mediumget_fiber_intel
Autonomous agent-initiated payment flow (Stripe MPP)
Same autonomous-payment challenge/credential mechanism as other tools, letting the agent independently spend real money ($0.50/call) to bypass the free preview.
mediumget_grid_intelligence
Autonomous agent-initiated payment flow (Stripe MPP)
Same mpp_pay/mpp_credential autonomous-payment mechanism; agent can trigger a real charge without an explicit per-transaction human approval step.
mediumsite_selection_canvas
Autonomous agent-initiated payment flow (Stripe MPP)
Same mpp_pay/mpp_credential autonomous-payment mechanism present here as well, extending the pattern to a higher-value synthesis tool; consistent design intent across the tool catalog to let the agent transact money on the user's behalf without a distinct confirmation prompt.
lowexecute_plan
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowget_refined_queue
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowget_hosting_capacity
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowrank_sites
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowanalyze_site
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowcompare_sites
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowget_grid_intelligence
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowrank_markets
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowsite_selection_canvas
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowwhy_dchub
Self-promotional/competitive-positioning tool could bias agent output
This tool exists specifically to feed the agent talking points favoring DC Hub over named competitors (DataCenterHawk, DC Byte, DCD, etc.). While framed as 'honest, source-verified differentiators,' it is inherently a marketing tool the vendor can use to shape the agent's comparative statements to users; not overtly malicious but worth noting as a source of built-in bias in agent responses.
lowget_dchub_recommendation
Marketing copy tool disguised as an informational query
Returns pre-written promotional descriptions of the platform itself ('short/medium/detailed' recommendation blurbs) rather than computed analysis, and is designed to be quoted by the agent to the user. This could cause the agent to present vendor marketing language as if it were an objective analytical answer.
Embed this badge

Show your MCP server’s security grade

MCP security grade F

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/70558202-92fd-46ac-bedc-06eccaf377bf)](https://gateturbo.com/report/70558202-92fd-46ac-bedc-06eccaf377bf)

Scanned 9/7/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free