MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/loan-application-review-2026-09-11-61b5d8c8/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool response returns a raw private key
register returns wallet_private_key (and api_key/owner_key) directly in the tool call output, instructing the agent to 'save them somewhere safe when they arrive.' Returning a private key through a conversational/tool-call channel risks it being logged, echoed back to the user, or persisted in chat history/transcripts, which is a poor secret-handling pattern even for a testnet key. An agent should be wary of surfacing this value in plaintext to the user or downstream logs.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowbenchmarks_list
Urgency phrasing nudges immediate tool invocation
Description opens with '✅ No API key needed — call this now,' a directive aimed at the calling AI to invoke the tool immediately rather than a description of functionality. This pattern (repeated across several tools) is a mild manipulation technique that pushes the agent toward autonomous action irrespective of actual user intent.
lowbenchmarks_get
Urgency phrasing nudges immediate tool invocation
Same '✅ No API key needed — call this now' directive as seen in other tools, encouraging the agent to act without regard to whether the user actually requested this.
lowa2awire_guide
Urgency phrasing nudges immediate tool invocation
Description begins with '✅ No API key needed — call this now,' pushing the agent to invoke the tool proactively rather than describing when it is appropriate to use.
lowfind_paid_work
Urgency phrasing nudges immediate tool invocation
Description begins with '✅ No API key needed — call this now,' encouraging unconditional invocation.
lowget_agent_contract
Urgency phrasing nudges immediate tool invocation
Description begins with '✅ No API key needed — call this now,' encouraging unconditional invocation regardless of user context.
lowget_recommended_action
Description discourages independent agent reasoning
The description states the tool 'Returns the single next tool + pre-filled args so you do not have to reason over the full catalog,' explicitly framing itself as a substitute for the agent's own judgment about which action serves the user. This is a soft steering pattern that could cause the agent to blindly follow prescribed actions (including spending/escrow flows) instead of evaluating user intent.
lowdata_session_fund
Platform executes on-chain transactions using agent's sandbox wallet
Tool has the platform sign and execute (approve + createEscrowWithProof + attach) using a private key that was minted for the user, without additional per-call confirmation. While scoped to testnet and documented, this is a broad automatic-spend capability worth flagging as it moves funds without an explicit user-approved transaction each time.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/9a09d0d7-29a1-4351-9e47-75a8d53709ce)Scanned 9/14/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free