MCP security report
newyorkautoquotes.com
D61/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓8 tools scanned
https://newyorkautoquotes.com/mcp
mediumpull_requests
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediummarket_data
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumrequest_agent_contact
Broad data-sharing scope beyond core matching purpose
The 'sell_identity' consent scope permits sharing the consumer's full name, phone, email and address with unspecified 'marketing partners' in addition to the up-to-4 licensed agents needed to quote/bind. This is a materially broader disclosure than the tool's stated purpose (connecting the consumer to licensed agents) and could result in the consumer's PII being sold to third parties beyond their reasonable expectation, even though a consent flag exists. Agents should ensure the human clearly understands the difference between 'contact_consumer' and 'sell_identity' before ever selecting the latter, and should default to the narrower scope.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowmarket_data
Sale of behavioral/demand data including AI vendor and channel info
This tool monetizes de-identified but still fairly granular records of user requests (age band, ZIP3, vehicle, coverage, mileage band, prices shown, and which AI vendor/door made the request) to paying third parties. While explicitly de-identified and disclosed, this is a secondary data-monetization capability adjacent to the core insurance-quoting function and could enable re-identification when combined with other data sources; worth noting for user-data-handling review though not overtly malicious.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/7f6da931-350a-4fd6-82f1-e5d6715fc1a3)Scanned 9/7/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free