MCP security report

api.hshintelligence.com

D49/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓28 tools scanned

https://api.hshintelligence.com/mcp

mediumhsh-b2b-contact
Broker of personal contact data (names, titles, emails) with minimal provenance guarantees
This tool sells named individuals' personal/role information and, for 'cohort' founders, their validated personal email addresses, sourced by scraping rather than consent-based collection. Returning bulk personal contact data for outreach purposes is a privacy-sensitive capability that could facilitate unsolicited contact or spam at scale if used without regard to applicable data-protection rules.
mediumhsh-b2b-enriched
Broker of personal contact and firmographic data
Extends hsh-b2b-contact with additional personal and company data merged together (industry, location, headcount, stage, etc. tied to named individuals), increasing the risk of enabling targeted outreach or profiling from data whose collection consent is unclear.
mediumhsh-b2b-full
Broker of full personal profile and contact data
Returns the maximum personal and firmographic data set (person, title, company, address, tech stack, hiring posture, profile link) in one call. Bulk sale of such combined personal records increases privacy risk relative to the simpler stated purpose of 'B2B intelligence'.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowhsh-company-intelligence
Automatic per-call cryptocurrency payment via x402
The tool description states calls are 'Pay per call via x402 (USDC on Base)' with no explicit confirmation step described. An agent invoking this tool could trigger a real-money charge without first surfacing the cost to the user for approval.
lowhsh-esg-events
Automatic per-call cryptocurrency payment via x402
Same pattern as other x402-billed tools: invoking it spends real USDC per call with no built-in confirmation gate, risking unauthorized spend if the agent calls it autonomously during a task.
lowhsh-hiring-signal
Automatic per-call cryptocurrency payment via x402
Invoking this tool incurs a real USDC charge per call via x402 with no described confirmation step, which could lead to unapproved spending if called without explicit user sign-off.
lowhsh-esg-news
Automatic per-call cryptocurrency payment via x402
Invoking this tool incurs a real USDC charge per call via x402 with no described confirmation step, which could lead to unapproved spending if called without explicit user sign-off.
lowhsh-cricket-momentum
Automatic per-call cryptocurrency payment via x402
Invoking this tool incurs a real USDC charge per call via x402 with no described confirmation step, which could lead to unapproved spending if called without explicit user sign-off.
Embed this badge

Show your MCP server’s security grade

MCP security grade D

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/80a807f9-1f7b-4d30-b69c-278ea8488b84)](https://gateturbo.com/report/80a807f9-1f7b-4d30-b69c-278ea8488b84)

Scanned 10/4/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free