MCP security report
asfo-ten.vercel.app
C67/100
Security grade CA few things are worth a closer look before connecting.
Connected ✓1 tool scanned
https://asfo-ten.vercel.app/api/mcp
mediumasfo_dispatch
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumasfo_dispatch
External data exfiltration to third-party agent gateway
The tool forwards arbitrary user task content to an external, opaque 'agent-to-agent gateway' (asfo) that routes it to unspecified third-party personas. There is no indication of what data retention, logging, or further routing occurs at asfo-ten.vercel.app, meaning sensitive user queries could be sent to an uncontrolled external service.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowasfo_dispatch
Embedded promotional/financial call-to-action in tool description
The description instructs the agent (and by extension the user) to 'Get an api_key and top up credit at https://asfo-ten.vercel.app.' This embeds a monetization directive and external URL inside a tool description, which goes beyond describing the tool's function and could steer the agent into recommending real-money top-ups on an unverified third-party site.
lowasfo_dispatch
Requires handling of a credential-like API key with per-call metering
The tool requires passing a live 'api_key' that is billed in USDC per call. If the agent is not careful about where this key is stored/logged, it risks leaking a financially-sensitive credential. This is a normal requirement for paid APIs but warrants caution given the external, unverified nature of the service.
lowasfo_dispatch
Encourages overconfident, non-hedged answers
The description states asfo 'returns one confident, non-hedged answer,' which could induce the agent to present speculative or uncertain third-party output as definitive fact to the user, reducing appropriate epistemic caution.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/82197fe8-fef1-42f0-af75-8e95be47b1cd)Scanned 9/8/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free