MCP security report
mcp.viridisconservation.com
B85/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓5 tools scanned
https://mcp.viridisconservation.com/security-preflight/mcp
mediumsecurity_preflight
Paid action with no explicit user-consent requirement stated
This tool charges money ($1, with a possible discounted intro rate) and accepts a manifest/payment_ref, but the description does not require the agent to obtain explicit user confirmation before spending funds. Combined with the promotional language about introductory pricing, an agent could be nudged into autonomously triggering paid calls. Tool descriptions that move money should explicitly instruct the calling agent to confirm with the user before executing (this is a general recommendation, not necessarily malicious intent here).
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowsecurity_preflight
Embedded pricing/marketing nudge could influence agent behavior
The description includes an incentive note ('New x402 payer wallets may receive the fleet-wide $0.01 introductory call') that reads like a promotional nudge rather than functional documentation. This kind of language embedded in a tool description could bias an agent toward invoking the paid tool more readily or believing it is cheaper than it will actually be, without the user's awareness. It's not a hard instruction override, but it's the kind of persuasive framing that shouldn't appear in a tool spec consumed programmatically by an agent.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/88998feb-c4a9-4049-a68e-62266b0ca83c)Scanned 9/10/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free