MCP security report

ruscrape.com

A91/100
Security grade ANo obvious red flags in the tools we could see.
Connected ✓12 tools scanned

https://ruscrape.com/mcp

low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowfetch_web
Built-in anti-bot / geo-blocking circumvention
The tool explicitly markets bypassing IP-based geofencing and datacenter-IP blocking (residential proxies) and JS-based bot challenges (headless Chromium rendering). While this is the stated purpose, it means the agent can be used to circumvent site owners' access controls and anti-scraping measures on third-party services, which may violate those services' terms of use. This is a capability worth surfacing to the user rather than a hidden manipulation, but it is unusually broad relative to a simple 'fetch a URL' tool.
lowfetch_ru
Anti-bot circumvention for RU sites
Same concern as fetch_web: residential=true is intended to defeat anti-bot/anti-scraping protections on named commercial sites (Wildberries, Ozon, Yandex Market, hh.ru, Avito), which is a capability that could be misused to violate those sites' terms of service.
lowtopup_balance
Hardcoded default email sent to payment provider
The 'email' parameter defaults to a fixed address (agent@domains-for-ai.app) that will be silently submitted to a payment rail (YooKassa) if the agent does not override it. This isn't a secret leak, but agents/users should be aware that an unrelated third-party email may be used for their payment record unless explicitly set.
Embed this badge

Show your MCP server’s security grade

MCP security grade A

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/9c453b3f-67f5-48a9-8e36-e0ada22f9a0c)](https://gateturbo.com/report/9c453b3f-67f5-48a9-8e36-e0ada22f9a0c)

Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free