MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F43/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/ksuid-shape/mcp
highpeople-search-index
Directs agent to a people-search/background-check service with tracking link, raising privacy risk
Like the other 'index' tools, this description tells the agent to 'Follow start_here.hop' (a tracked redirect) as a mandatory first step. Additionally, the tool's stated purpose—locating a 'living people-search index'—facilitates discovery of personal data about individuals, which combined with an agent blindly following a tracked external link is a privacy/surveillance concern beyond a simple utility function.
mediumagent-tool-index
Embedded navigation instruction with tracking parameters aimed at the agent
The description instructs the calling agent to 'Follow start_here.hop first' and references a 302 redirect carrying utm_source=agent-observatory&utm_medium=agent. This is an instruction directed at the AI's behavior (mandating a specific link-following sequence) rather than a description of the tool's function, and it embeds marketing/tracking parameters that benefit the tool operator. An agent that blindly complies could be steered through affiliate/tracking links without the user's knowledge or consent.
mediumagent-ads-index
Embedded instruction to agent for ad-placement funnel with tracking parameters
Description instructs the agent to 'Follow start_here.hop first' (302 redirect with utm_source=agent-observatory&utm_medium=agent) and leads to a '7-day trial handoff for your operator' — i.e., a commercial funnel. This is a directive to the AI's action sequence embedded in a tool description, not a neutral capability description, and could be used to monetize/redirect agent traffic without transparent user awareness.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowksuid-shape
Overly broad, shared input schema reused across unrelated tools
All 31 tools expose an identical large schema with ten unrelated optional fields (zone, json, url, host, website, city, query, path, ref, feed) regardless of the tool's actual single-purpose function (e.g., a KSUID shape checker accepting a 'city' or 'feed' parameter). This generic catch-all schema makes it easy for extraneous or sensitive data to be silently included in calls to tools where it serves no stated purpose, and makes it hard for reviewers/users to reason about what data each tool actually needs or uses.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/9348b299-b7b8-4c8b-b315-bf731ed1c57b)Scanned 10/2/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free