MCP security report
usero.io
C70/100
Security grade CA few things are worth a closer look before connecting.
Connected ✓2 tools scanned
https://usero.io/mcp
mediumstart_signup
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumcheck_signup
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowstart_signup
Email-based account creation flow with rate limits described
Tool sends an email with a confirmation link to create an account and issue an API key. This is a legitimate-looking signup flow, but the agent should verify the email address belongs to the user before sending, since the tool description explicitly instructs the agent to 'ask for it if you do not have it' — this is a benign instruction, not manipulative, but agents should avoid using an email address obtained from context/other tools without explicit user confirmation.
lowcheck_signup
API key delivered directly to agent context
The tool returns a raw API key to the agent once the user completes email confirmation. While this is the tool's stated purpose (obtaining an API key), the agent will hold a live credential in its context; the agent/host should ensure this key is stored securely and not echoed back to untrusted locations or logged insecurely.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/93ada5cb-57c1-4e89-9324-8ce5a977f2e5)Scanned 9/8/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free