MCP security report
axiomrelay.io
B79/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓10 tools scanned
https://axiomrelay.io/mcp/discovery
mediumaxiom_api_doctor
Unconstrained input schema accepting arbitrary object data
The 'apiDescription' parameter is typed as a bare object with no defined properties or additionalProperties restriction, meaning the tool will accept and process arbitrary nested data of any shape. Combined with a vague description ('performs bounded first-agent work through the shared capability policy dispatcher') that does not clarify what data is expected or how it's used, this creates risk that sensitive data (tokens, credentials, internal file contents) could be inadvertently or deliberately passed through this field and processed/forwarded without the user understanding the scope.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowaxiom_concierge_answer
Vague functional description obscures actual capability scope
The description 'performs bounded first-agent work through the shared capability policy dispatcher' is generic marketing/boilerplate language that does not clearly state what the tool actually does, making it hard for a reviewer or the agent to assess what actions it may take on the user's behalf.
lowverify_receipt
Empty input schema allows arbitrary unvalidated payloads
The input_schema is simply {'type':'object'} with no properties defined, so any arbitrary data can be submitted. While likely intended for flexibility with different receipt formats, this lack of constraint means there's no visibility into what fields are expected or how they're used, and it could be leveraged to pass unexpected data through the tool.
lowsearch_directory
Repeated 'No commercial obligation' branding across all tools may function as a trust-lowering dark pattern
Every tool in this set repeats the phrase 'No commercial obligation,' including tools that deal with pricing, tiers, and marketplace transactions (e.g., search_directory has price/tier/settlement fields). This uniform reassurance could condition the agent (and by extension the user) to disregard commercial/financial implications of using these tools, even though some tools clearly interact with priced services and settlement profiles. This is not necessarily malicious but is worth flagging as potentially misleading boilerplate.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/9f8ef38a-1a6a-496e-9f67-fecbf783992d)Scanned 9/16/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free