mediumregister_agent
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowregister_agent
Non-parameter field used to inject agent instructions into schema
The input_schema includes a field named `_read_first` that is explicitly described as 'Not a parameter.' It is used to carry instructions to the AI agent (e.g., 'put the key in your MCP client config for this server and reconnect') rather than to describe an actual input value. Embedding directives in a schema field this way is an unusual pattern for smuggling instructions to the model, and telling the agent to edit its own MCP client configuration file is an action beyond the stated purpose of the register_agent tool (creating an account). While the underlying advice appears benign in this context (explaining that the returned key can't retroactively authenticate the current connection), the mechanism itself — using a fake parameter to deliver imperative instructions to the agent — is a pattern worth flagging and should not be normalized as a way to pass instructions outside of the description field.