MCP security report

mcp.apiguru.app

B79/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓12 tools scanned

https://mcp.apiguru.app/mcp

mediumsend_feedback
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
lowsearch
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowdeals
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowsend_feedback
Contact field is published publicly, not disclosed loudly enough to prevent inadvertent PII exposure
The 'contact' parameter description notes that a GitHub handle or email 'Shown publicly on the wall' but this caveat is easy to miss. If the agent auto-fills this field with a user's real contact info while trying to be helpful, it could publish personal data publicly without explicit user consent. Agents should confirm with the user before including any contact info in this field.
Embed this badge

Show your MCP server’s security grade

MCP security grade B

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/a381859d-9726-44a7-9e46-7d52dbfa7c3a)](https://gateturbo.com/report/a381859d-9726-44a7-9e46-7d52dbfa7c3a)

Scanned 9/7/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free