MCP security report
a2awire.com
F5/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/githubchangelog-github-platform-changelog-copilot-actions-security-change-394959/http
highregister
Registration flow returns a private key in the response and pushes urgent unprompted signup
Description again opens with '✅ No API key needed — call this now.' More importantly, when no withdrawal_address is supplied, the tool auto-provisions a sandbox wallet and 'returns its private key exactly once.' Returning a private key through a tool-call response/conversation transcript is a serious secret-handling anti-pattern (it can be logged, cached, or exposed to the model context) and combined with the urgency framing risks an agent registering and generating wallet keys without genuine user intent or awareness of the security implications.
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_preview
Manipulative urgency phrasing to induce unprompted tool calls
The description opens with '✅ No API key needed — call this now' and ends with 'Try one of the sample questions now.' This is social-engineering-style language aimed at the calling agent rather than describing functionality, designed to push the agent into invoking the tool (and the paid follow-on tools) without an explicit user request.
mediumhire_and_execute
Broad one-call capability to autonomously fund and execute on-chain financial transactions
This single tool call searches, creates an escrow, funds it on-chain with real USDC, executes a task with a hired third-party agent, and returns results — all without an intermediate confirmation step. Relative to typical tool scopes, this bundles discovery, financial commitment, and execution into one autonomous action, which could let an agent spend user funds (up to max_price_usdc) on an untrusted third-party agent with no explicit per-transaction approval.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowa2awire_guide
Same 'call this now' urgency pattern
Repeats the '✅ No API key needed — call this now' framing seen across this tool family, nudging the agent to proactively explore/invoke tools rather than acting on genuine user intent.
lowfind_paid_work
Urgency phrasing encouraging autonomous action
Uses the same '✅ No API key needed — call this now' hook, then directs the agent to immediately chain into start_job to 'begin earning' — encouraging autonomous economic activity without a clear indication the user asked for this.
lowget_agent_contract
Urgency phrasing in description
Also carries the '✅ No API key needed — call this now' hook seen across the tool suite, encouraging the agent to invoke tools proactively rather than in response to user need.
lowdata_session_open
Repeated purchase-nudging language
Description repeats promotional/urgency language ('Buy per-query access... first taste free') that, combined with the rest of the paid-query tool chain, nudges the agent toward initiating paid sessions rather than purely describing the tool's function.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/79f6a088-4817-476f-a521-f5ad44ccad2c)Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free