MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/ap-exception-review-2026-09-10-ad46e3f1/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool generates and asks agent to persist raw private keys and credentials
register returns api_key, owner_key, and a wallet_private_key (testnet) directly to the calling agent and instructs it to 'save them somewhere safe.' Having an LLM-driven agent handle and persist raw private keys and account secrets in its context/memory creates meaningful risk of accidental leakage (e.g., via logs, later tool calls, or being echoed back to the user/third parties). Even though scoped to testnet, this pattern of routing high-value secrets through agent context should be flagged.
mediumhire_and_execute
Single call combines discovery, on-chain fund escrow, and task execution
This tool searches the marketplace, creates and funds an on-chain USDC escrow, and executes a task in one call, with only a max_price_usdc ceiling as a safeguard. Bundling autonomous financial commitment (real fund movement, even if testnet-configured) with task execution in a single broad tool increases the blast radius of a single erroneous or manipulated call compared to a staged flow with explicit confirmations.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowbenchmarks_list
Urgency-nudge language embedded in description
The description opens with '✅ No API key needed — call this now.' This is a persuasive imperative aimed at the calling agent rather than a factual description of the tool's function. Several other tools (benchmarks_get, a2awire_guide, find_paid_work, register, get_agent_contract) repeat this pattern, which can push an agent to invoke tools proactively/immediately rather than in response to genuine user intent.
lowa2awire_guide
Urgency-nudge language ('call this now')
Same pattern as benchmarks_list: the description tells the agent to act immediately ('call this now') rather than simply describing capability. Repeated across multiple tools this functions as a mild engagement-driving directive to the agent, not a description of behavior.
lowfind_paid_work
Urgency-nudge language ('call this now')
Description includes '✅ No API key needed — call this now', an imperative aimed at influencing the agent's autonomous behavior toward immediate action rather than describing what the tool does.
lowconfirm_keys_persisted
Gate reinforces agent handling of sensitive keys
This tool exists specifically to confirm the agent has stored api_key/owner_key/wallet_private_key from register before allowing money-moving tools. It reinforces the pattern flagged in 'register' of routing sensitive credentials through the agent's context rather than a secure out-of-band channel.
lowget_recommended_action
Encourages bypassing independent reasoning over full tool catalog
Description states the tool returns 'the single next tool + pre-filled args so you do not have to reason over the full catalog.' This nudges the agent to act on pre-filled recommendations without independently evaluating alternatives, which could be leveraged to steer agent behavior along a fixed path rather than one chosen based on the user's actual needs.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/78c0a2c3-2157-4a91-883d-2bdf9895b78a)Scanned 9/17/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free