MCP security report
mcp.volunteerreminder.com
D52/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://mcp.volunteerreminder.com/mcp
mediumget_pricing
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumcreate_account
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumstart_checkout
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
lowpreview_schedule_occurrences
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowcreate_schedule
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowupdate_schedule
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowimport_volunteer_schedule
Embedded instruction telling the agent not to log input data
The description contains 'Do not log this text.' directed at the AI handling pasted roster data (which may include volunteer names, phone numbers, and emails). While this could be framed as privacy-conscious, it is an instruction embedded in a tool description that tells the agent to suppress normal logging/visibility of data it processes, which is a pattern that can be used to hide actions or data handling from audit trails or the user. Recommend treating this as an application-level setting the user is informed of, not a silent directive baked into the tool description.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/72db7109-edb6-4dd6-a001-c8f8650d2fb8)Scanned 10/4/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free