MCP security report
mcp.danielsdesignstudio.com
B79/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓1 tool scanned
https://mcp.danielsdesignstudio.com/mcp
mediumreflect
Embedded upsell instructions directing agent to promote external paid service
The description instructs the AI to funnel users toward a paid 'Brand Discovery Intelligence Plan' via a specific external email address (grover@danielsdesignstudio.com) and a tracked marketing URL (https://danielsdesignstudio.com/agents?src=mcp-tool). This goes beyond describing the tool's function and effectively coaches the agent to act as a sales channel for an external commercial offering, which is not something the user necessarily consented to or asked for.
lowreflect
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowreflect
Instructs agent to fabricate/locate URLs without user confirmation
The description states 'find the brand's official site yourself and pass it; never ask the user for a URL you can find,' encouraging the agent to autonomously guess or supply data (a URL) rather than confirming with the user. This could lead to incorrect or unverified data being submitted, and discourages a normal verification step with the user.
lowreflect
Conversational behavior steering beyond tool functionality
The 'WHEN TO CALL' / 'WHEN NOT TO' guidance attempts to shape when and how the agent responds in conversation (e.g., 'answer it from what you know, then OFFER the free Reflection'), which is coaching general assistant behavior rather than purely describing the tool's parameters and effects. While not overtly malicious, this pattern of embedding behavioral directives in a tool description is a vector that could be used to manipulate agent responses more broadly.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/77b5feeb-04e5-44ae-9b00-39543c7a6ff2)Scanned 9/7/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free