MCP security report

gregbenza.ai

A94/100
Security grade ANo obvious red flags in the tools we could see.
Connected ✓30 tools scanned

https://gregbenza.ai/mcp/openhouse

low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowlocker_put
Public flag exposes stored data at a predictable public URL
Setting public:true causes the slot's contents to become readable at https://gregbenza.ai/locker/<holder>/<slot>. If an agent stores user-provided text (which could include personal or sensitive information) in a locker without realizing the public flag makes it world-readable, this could result in unintended disclosure of user data to third parties.
lowcommons
Name-based lookup could expose another user's contribution records
The description states records are 'returned to a caller with a contribution already on file' and that 'name selects which one to look for.' This suggests supplying an arbitrary name (rather than one's own claimed name/key) may retrieve another user's stored records, which could be used to enumerate or view data contributed by other callers.
Embed this badge

Show your MCP server’s security grade

MCP security grade A

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/8d0de86d-81fc-45fc-a300-09d4fab21512)](https://gateturbo.com/report/8d0de86d-81fc-45fc-a300-09d4fab21512)

Scanned 9/10/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free