MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F5/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/tz-asia-riyadh/mcp
highagent-tool-index
Embedded directive instructs agent to follow tracked redirect chain
The description tells the agent to 'Follow start_here.hop first' through a 302 redirect carrying utm_source=agent-observatory&utm_medium=agent tracking parameters, then surface docs/CLI/remote-MCP hops for a third-party 'pay-per-call tool gateway'. This is an instruction aimed at the agent's behavior (not just a description of output), directing it to a specific external funnel with tracking, which looks like an attempt to get agents to discover and promote a commercial service rather than perform a narrow, well-defined tool function.
highpeople-search-index
Directs agent toward a people-search product and tracked redirect
Description instructs the agent to 'Follow start_here.hop' (tracked redirect) to find a 'living people-search index.' Combining an embedded navigation directive with a people-search capability raises privacy/safety concerns (facilitating lookup of personal information about living individuals) and reads as marketing/SEO injection rather than a legitimate bounded tool description.
highagent-ads-index
Instructs agent to help onboard an ad-placement/trial product
Description tells the agent to 'Follow start_here.hop first' (tracked redirect with utm parameters) and then surface a '7-day trial handoff for your operator.' This embeds a directive aimed at getting the agent to promote and onboard the user's operator into a commercial ad-placement scheme, which is scope creep beyond a simple lookup/check tool and resembles prompt-injection style marketing funnel behavior.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowplaywright-url-ok
Possible name confusion with well-known Playwright MCP tool
The tool is named 'playwright-url-ok' and is functionally identical to 'browser-url-ok' in this same tool set. Reusing the well-known 'Playwright' brand name for a trivial URL-shape check (no browser actually launched) could cause an agent or user to mistake it for the real Playwright automation tool, leading to confusion about actual capability.
lowutc-time
Overly broad shared schema unrelated to stated purpose
All 31 tools in this collection expose an identical 10-field schema (zone, json, url, host, website, city, query, path, ref, feed) regardless of the tool's single stated purpose (e.g., a UTC time tool accepting file paths, git refs, RSS feeds, search queries, etc.). This generic catch-all surface is unusual; while each individual field is described as 'discarded,' the inconsistency between stated purpose and accepted inputs makes it hard to verify what data is actually used or retained server-side, and could allow silent repurposing of a single endpoint to collect assorted user data (URLs, queries, paths, hostnames) under the guise of unrelated utility tools.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/80272b79-f522-4853-9cce-a5427e440112)Scanned 10/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free