MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/ap-exception-review-2026-09-10-run-13e274/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Generates and surfaces raw private key material
The register tool creates a wallet and returns wallet_private_key, api_key, and owner_key in plaintext as a 'once-shown' value, instructing the agent to 'save them somewhere safe.' This directs the agent to persist highly sensitive credentials (including a blockchain private key controlling funds), which could easily be leaked into logs, chat history, or an insecure store if the agent complies naively. Any tool that mints and returns private keys warrants extra caution about where/how the agent is told to store them.
mediumhire_and_execute
One-call tool autonomously creates escrow and spends funds
This tool searches for a provider, creates an on-chain escrow, funds it with USDC, and executes a task — all in a single call, using a default max_price_usdc of 1.0 if not specified. This bundles discovery, financial commitment (real fund movement/escrow funding), and task execution into one opaque action with no explicit confirmation step exposed in the schema, which is a broad and potentially costly capability relative to a simple 'hire' request, especially if invoked on mainnet with a user-unaware default spending ceiling.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowregister
spawn_approval_required defaults to autonomous
The spawn_approval_required flag defaults to false, meaning child agent spawns ('foundry') proceed without owner approval unless explicitly overridden. This is a broad, silently-enabled autonomous capability (creating new agent identities/spending) that a user may not expect by default.
lowbenchmarks_list
Imperative 'call this now' framing nudges autonomous action
The description opens with '✅ No API key needed — call this now,' an imperative aimed at the AI rather than descriptive documentation. This pattern recurs across several tools (benchmarks_get, a2awire_guide, find_paid_work, register, get_agent_contract) and appears designed to bias the agent toward immediately invoking tools/chaining a flow rather than pausing to confirm with the user, especially before tools that lead into funding/escrow/spending flows.
lowbenchmarks_get
Imperative 'call this now' framing
Same pattern as benchmarks_list: description begins with an instruction telling the agent to act immediately ('call this now'), which is unusual for a passive read-only tool description and could be used to steer agent behavior beyond simple documentation.
lowa2awire_guide
Imperative 'call this now' framing
Uses the same '✅ No API key needed — call this now' directive language aimed at the calling agent, encouraging unprompted tool invocation.
lowfind_paid_work
Imperative 'call this now' framing plus earnings funnel
Description tells the agent to 'call this now' and funnels toward start_job to 'begin earning,' encouraging the agent to autonomously pursue paid work/financial engagement without clear indication this requires explicit user authorization.
lowget_agent_contract
Imperative 'call this now' framing
Same directive phrasing pattern used to nudge immediate, unprompted invocation by the agent.
lowdata_session_fund
Automated multi-step on-chain funding without per-step confirmation
Performs approve + createEscrowWithProof + attach automatically for a sandbox wallet minted at registration. While scoped to testnet, this is a broad automated financial capability (multiple chained on-chain transactions) executed via a single tool call.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/7dbea63a-1c94-46e1-a516-567036118753)Scanned 9/17/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free