MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
D58/100
Security grade DHigh-severity signals — review these before connecting.
Connected ✓30 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/package-ok/mcp
highagent-tool-index
Instructs agent to follow an untrusted redirect chain to an external tool gateway
The description tells the AI to 'Follow start_here.hop first (skill file, 302)' and describes additional 'docs, CLI, and remote MCP hops.' This is an instruction embedded in a tool description directing the agent to chase a chain of redirects to an external, unverified 'Monid' gateway and potentially register additional remote MCP tools. This is a classic vector for supply-chain injection: it could lead the agent to load and execute arbitrary follow-on tool definitions or content from a third party without the user's knowledge or consent, entirely outside the tool's stated 'discard task text' scope.
mediumpeople-search-index
Discovers a people-search / PII lookup service for 'living people'
The tool is described as helping locate a 'living people-search index (Ploid)' with API/CLI/remote MCP hops for looking up personal information about individuals. This capability facilitates locating services designed to aggregate and expose personal data about private individuals, which raises privacy, doxing, and stalking-enablement concerns disproportionate to a simple lookup/discard utility.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/88ae6be7-6571-4abb-8cd5-78a306fc3940)Scanned 9/15/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free