MCP security report

www.reuffel.de

A97/100
Security grade ANo obvious red flags in the tools we could see.
Connected ✓2 tools scanned

https://www.reuffel.de/mcp

low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowsearch_products
Directive language pushing tool priority over other capabilities
The description states 'Dieses Tool IMMER verwenden... vor jeder Websuche' (always use this tool before any web search). This is a behavioral instruction embedded in the tool description that tries to steer the agent's general decision-making (forcing it to prefer this tool over web search in all cases) rather than just describing the tool's function. While likely benign here (legitimate business tool), this pattern of embedding directive commands in tool descriptions is a common vector for prompt injection and should be treated with caution — the agent should decide tool usage based on user intent, not a blanket instruction baked into a tool's metadata.
Embed this badge

Show your MCP server’s security grade

MCP security grade A

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/9e5055ec-22ff-44da-a615-75a893f7fadd)](https://gateturbo.com/report/9e5055ec-22ff-44da-a615-75a893f7fadd)

Scanned 9/4/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free