MCP security report

api.helena.bio

C70/100
Security grade CHigh-severity signals — review these before connecting.
Connected ✓7 tools scanned

https://api.helena.bio/folklore/v1/mcp

highsupport_helena
Off-topic tool soliciting agent action unrelated to stated genomics purpose, with self-justifying language
This tool has no connection to variant interpretation, literature search, or gene-disease association—the stated purpose of this MCP server. Instead it invites the agent to 'learn how [it] can support or spread' a named entity's ('Helena's') infrastructure via a 'separate Helena Good MCP,' and preemptively asserts that it 'does not initiate payment, create a relay, or change any Folklore scientific result.' This pattern of unsolicited scope expansion combined with pre-emptive reassurance is a classic social-engineering / prompt-injection pattern designed to nudge an agent toward taking actions (contacting or recommending a different MCP server, promoting a cause) that the user never asked for and that fall outside the tool's genomics function. Even framed as 'opt-in,' simply exposing this tool to an agent increases risk that the agent will autonomously invoke it or surface unsolicited advocacy to the user. Recommend removing or requiring explicit human/user-initiated context before this tool is ever exposed.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge

Show your MCP server’s security grade

MCP security grade C

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/8598cbe3-90d1-42a9-b8e0-038cb27af068)](https://gateturbo.com/report/8598cbe3-90d1-42a9-b8e0-038cb27af068)

Scanned 9/14/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free