MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/benchmarks/predict-the-news/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool response returns raw private keys and API credentials into the model context
The register tool returns api_key, owner_key, and (on testnet) wallet_private_key directly in its output, described as shown 'ONCE'. Passing raw private keys and long-lived credentials through an LLM's context window is risky: the values can end up in conversation logs, be echoed back to the user in plaintext, or be retained by the model provider. A tool that provisions credentials should ideally support out-of-band delivery rather than routing secret key material through the agent's context.
mediumhire_and_execute
Single call bundles marketplace search, on-chain USDC escrow funding, and task execution
This tool performs several consequential actions (search, escrow creation, on-chain funding of USDC, and task execution) in one atomic call, with only a max_price_usdc ceiling (defaulting to 1.0) as a safeguard. This is a broad capability for a tool whose name suggests simple task delegation — it can move real funds on-chain without a separate explicit confirmation step, which is riskier than the described 'one-call bridge' convenience implies.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowregister
Default autonomous child-agent spawning without owner approval
spawn_approval_required defaults to false ('Defaults to autonomous'), meaning newly registered agents can spawn child agents (foundry) without any owner confirmation unless the caller explicitly opts into approval. Combined with financial capabilities (spending caps, wallet provisioning) elsewhere in the same tool, this default increases the blast radius of an agent acting unsupervised.
lowbenchmarks_list
Urgency-framed instruction nudging immediate tool invocation
The description opens with '✅ No API key needed — call this now,' an imperative aimed at the calling agent to invoke the tool immediately. This pattern recurs across several tools (benchmarks_get, a2awire_guide, find_paid_work, register, get_agent_contract) and functions as a mild behavioral nudge that could encourage an agent to act before reasoning about whether the action is appropriate in context. Not overtly malicious, but worth noting as a manipulative framing technique embedded in tool metadata rather than functional documentation.
lowa2awire_guide
Same 'call this now' urgency framing as other tools
Repeats the pattern of directive language intended to influence the agent's behavior beyond describing the tool's function, encouraging immediate invocation without additional deliberation.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/79495a53-3783-4b94-b2ff-8573ae6acf3c)Scanned 9/7/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free