MCP security report

mcp.chnlsync.com

C73/100
Security grade CA few things are worth a closer look before connecting.
Connected ✓3 tools scanned

https://mcp.chnlsync.com/mcp

mediumask_sync_advisor
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumrequest_broker_callback
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowrequest_broker_callback
Consent requirement stated only in description, not enforced by schema
The tool relies on the description text to instruct the agent to obtain explicit user consent before sharing name/email with a third party (CHNLSYNC). Since this is a natural-language instruction rather than a schema constraint, a compromised or careless agent could bypass it and submit PII without genuine consent. This is a reasonable design but worth flagging as a soft control with no technical enforcement.'}],
Embed this badge

Show your MCP server’s security grade

MCP security grade C

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/7ca9d87b-4521-467a-9e68-ef948785c61c)](https://gateturbo.com/report/7ca9d87b-4521-467a-9e68-ef948785c61c)

Scanned 9/10/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free