MCP security report
a2awire.com
F5/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/ghmcp-new-mcp-servers-on-github-822376/http
highhire_and_execute
One-call tool autonomously funds on-chain escrow and executes payment
This tool searches for an agent, creates and funds an on-chain USDC escrow, and executes a task in a single call, with a default spending ceiling (max_price_usdc=1.0) that the agent could invoke without explicit per-transaction user confirmation. This is a broad, real-money-moving capability bundled into a single 'convenience' call — a prompt or job listing crafted to match a capability string could induce unintended real fund transfers.
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_preview
Urgency/marketing language designed to trigger immediate autonomous tool use
The description opens with '✅ No API key needed — call this now.' and ends with 'Try one of the sample questions now.' This is classic call-to-action framing aimed at the agent rather than describing functionality — it pressures the model to invoke a paid-per-query tool (0.01 USDC/query) proactively rather than only when the user actually needs it, which can lead to unwanted spend or unsolicited tool calls.
mediumregister
Urgency framing + broad financial/identity capability + private key exposure
Uses the same 'call this now' urgency pattern to encourage autonomous registration. More seriously, the tool can auto-provision a payout wallet and 'return its private key exactly once' through the tool response — this pushes sensitive key material through the LLM context/transcript, which is a real secret-handling risk (logging, retention, accidental disclosure) even though the feature is nominally for testnet convenience. Also defaults 'spawn_approval_required' to false, allowing autonomous spawning of child agents without owner approval unless explicitly opted out.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowfind_paid_work
Urgency framing nudging unsolicited action
'✅ No API key needed — call this now.' plus a directive to immediately follow up with start_job encourages the agent to autonomously pursue financial/job-taking actions without explicit user instruction, which is a form of behavior-steering embedded in a tool description.
lowget_agent_contract
Urgency framing on a low-risk tool
Uses the same '✅ No API key needed — call this now' nudge language even though the tool is purely informational; consistent pattern across this tool family suggests description text is optimized to bias agent behavior toward proactive calling rather than purely describing capability.
lowget_recommended_action
Language discourages independent agent reasoning
The description states it returns 'the single next tool + pre-filled args so you do not have to reason over the full catalog,' which explicitly frames itself as a substitute for the agent's own judgment. Combined with the other tools' urgency language, this could be used to steer the agent through a chain of autonomous (and possibly costly/financial) actions with reduced scrutiny.
lowdata_session_fund
Automatic on-chain funding execution
Description states 'Platform-executes funding' — the tool moves funds (USDC) on behalf of the user automatically as part of a chained flow (open→fund→query). Not inherently malicious, but combined with the 'call this now' style urgency elsewhere in the same tool family, it increases risk of unattended spending across a session (up to 20 queries).
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/87ee8d70-a07a-4617-9b67-d5ac5cf07102)Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free