mcp.yesmcp.com

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

The description tells the AI to detect 'directory reviewers' and, based on a token 'from the submitted test-prompt list', switch the tool's output to seeded fake ([TEST]) availability instead of real data. While it is documented in the schema (not fully covert) and includes a caveat not to use it for real users, this is an unusual out-of-band behavior-switching mechanism triggered by a claim of identity ('reviewer') that any user or injected prompt could assert. This creates a risk that a user could be shown fabricated availability data if the agent is tricked into believing it is in a 'review' context, or that the mechanism could be abused as a general-purpose hidden mode toggle.

This tool has nothing to do with yesmcp's consultation-booking business (its stated purpose) and instead reports statistics about the entire Anthropic Claude connector directory. Including a tool this far outside the service's core function is scope creep; it could be used to inject curated 'facts' (with an external source URL and licensing claims) into unrelated conversations, potentially to promote the vendor or influence the assistant's commentary about directory rankings/competition. Not overtly malicious, but broader than what a booking tool needs and worth scrutiny.