MCP security report
spoolis.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓17 tools scanned
https://spoolis.com/api/mcp
mediumcreate_spool
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumcreate_counterparty_invite
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumpropose_spool
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdecline_spool
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumcancel_spool
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumcommit_payment
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumcomplete_spool
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
lowverify_result
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowcreate_spool
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowamend_spool
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowcreate_spool
Third-party evaluator can fully control verification outcome for a condition
Conditions may set verification_method to 'third_party' with an arbitrary evaluator_id/kind, causing Spoolis to accept that external system's signed/hashed/declared result instead of evaluating the condition itself. If a party supplies a malicious or compromised evaluator_id, this could let an external, unvetted service determine payment/earned-value outcomes. Not an agent-manipulation issue, but worth flagging as a broad trust delegation baked into the schema with no allowlist or provenance check on evaluator_id beyond string length.
lowsubmit_evidence
on_behalf_of allows submitting evidence as another party
The on_behalf_of field lets a caller attach evidence attributed to a different party id (pty_...) without an explicit authorization check visible in the schema/description. Combined with claim_class 'actor_identity', this could enable evidence impersonation if access control isn't enforced server-side. Recommend confirming server-side authorization ties on_behalf_of to the actual authenticated party.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/868a2561-7d32-4b09-a8da-cbbc5aaf7323)Scanned 9/8/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free