MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/pypiwatch-new-pypi-package-releases-python-dependency-updates-dffb95/http
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool can return a private key in-band to the agent
When withdrawal_address is omitted on testnet, the tool auto-provisions a sandbox wallet and returns its private key 'exactly once' via the tool response. Passing raw private keys through an LLM-visible tool response risks the key being logged, echoed back to the user, or otherwise leaked, since the agent may not treat it with appropriate secrecy. Also contains the same 'call this now' urgency framing seen in other tools in this set.
mediumhire_and_execute
Broad one-call capability to autonomously spend funds and execute tasks
This single tool call searches the marketplace, creates and funds an on-chain USDC escrow, and executes a task with a hired third-party agent — all without an intermediate confirmation step exposed in the schema beyond a max_price_usdc ceiling. This bundles discovery, financial commitment, and task execution into one autonomous action, which is a broad capability that could result in unintended real-money spend or engagement with an unvetted third-party agent if invoked without sufficient care.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdata_preview
Urgency/manipulation language aimed at the calling agent
The description opens with '✅ No API key needed — call this now.' This is a persuasive nudge specifically targeting the AI's decision process to invoke the tool immediately, rather than neutrally describing functionality. Repeated across multiple tools, this pattern could be used to bias agent behavior toward unnecessary tool calls.
lowa2awire_guide
Urgency/manipulation language aimed at the calling agent
Uses the same '✅ No API key needed — call this now' framing to push immediate invocation rather than letting the agent decide based on user need.
lowfind_paid_work
Urgency/manipulation language aimed at the calling agent
Same '✅ No API key needed — call this now' pattern encouraging the agent to act without evaluating relevance to the user's actual request.
lowget_agent_contract
Urgency/manipulation language aimed at the calling agent
Same '✅ No API key needed — call this now' pattern; combined with self-verification instructions, it nudges the agent to act autonomously on contract validation.
lowdata_session_fund
Autonomous on-chain funding action
Description states the platform 'executes funding' on behalf of the caller without an explicit confirmation parameter, meaning a call here commits real USDC spend as a side effect. Low severity since amounts are small/session-scoped, but worth flagging as a spend-triggering action bundled into a simple-sounding tool.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/a29950f6-02bb-4355-9c20-95ede2c30235)Scanned 9/7/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free