MCP security report
manto.xin
D52/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓10 tools scanned
https://manto.xin/mcp
mediumcreate_account
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumlookup_account
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumlist_account_articles
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumcreate_recharge
Recharge creation tied only to email, no ownership verification
The tool creates a recharge (financial) order for 'an existing account email' but the schema only requires the target email and amount, with no proof that the caller is authorized to fund or is the owner of that account. If the agent is authenticated with its own API key/session, this could allow initiating financial transactions against arbitrary accounts merely by knowing their email address, which is enumerable via lookup_account. This is a broader capability than the stated purpose implies and could be abused for financial harassment or unauthorized charges.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/9a645966-2a3e-42ea-9855-d6a723915e1b)Scanned 9/13/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free