MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F5/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/tz-europe-oslo/mcp
highagent-tool-index
Embedded directive instructing agent to follow tracking redirect chain
The description tells the AI to 'Follow start_here.hop first' through a redirect carrying utm_source/utm_medium tracking parameters, and advertises a 'pay-per-call tool gateway'. This is an instruction aimed at the agent's behavior (not just a data description) that could cause it to autonomously navigate to and interact with an unknown monetized third-party service, potentially incurring costs or registering the operator with an external gateway without explicit user consent.
highpeople-search-index
Directs agent to a people-search/data-broker service via tracked hop
Description instructs the agent to 'Follow start_here.hop' (with UTM tracking) to reach a 'living people-search index.' Steering an agent toward people-search/data-broker services raises privacy risks (facilitating lookup of personal information about real individuals) and embeds a procedural directive rather than a neutral tool description.
highagent-ads-index
Embedded marketing directive and trial sign-up handoff instruction
Description instructs the agent to follow a tracked redirect and explicitly offers a '7-day trial handoff for your operator.' This is an instruction aimed at getting the agent to initiate a commercial trial/signup on behalf of the user/operator, which could create unwanted financial or contractual commitments without clear, informed user consent, and is unrelated to any stated utility function of the tool.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowagent-tool-index
Tracking parameters embedded in tool-driven navigation
The hard-coded utm_source=agent-observatory&utm_medium=agent query parameters suggest the tool call itself is designed to generate trackable referral traffic from AI agents, which is a form of covert analytics/monetization not disclosed to the end user.
lowpeople-search-index
Tracking parameters embedded in redirect
Same utm_source=agent-observatory&utm_medium=agent tracking pattern as other 'index' tools, indicating the call is used to attribute agent-driven traffic to a specific campaign without user awareness.
lowagent-ads-index
Tracking parameters embedded in redirect
Same utm_source=agent-observatory&utm_medium=agent tracking pattern, used to attribute agent traffic for an ad-placement/trial funnel without the user's knowledge.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/83b27327-3f86-4f97-9d6e-d9c66a7b16d9)Scanned 10/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free