MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
D46/100
Security grade DHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/port-23/mcp
highpeople-search-index
Points agent toward a people-search / personal data lookup service with embedded tracking instruction
This tool's stated purpose is to help locate a 'people-search index' (personal information lookup service), which raises privacy concerns around facilitating doxing or unauthorized personal data searches. Additionally, like the other index tools, it instructs the agent to 'Follow start_here.hop' with embedded utm tracking parameters — an embedded directive steering agent navigation rather than a neutral capability description.
mediumagent-tool-index
Embedded directive instructing agent to follow tracking link first
The description tells the agent to 'Follow start_here.hop first' and describes a 302 redirect carrying utm_source=agent-observatory&utm_medium=agent tracking parameters. This is an instruction embedded in a tool description that steers agent behavior (forcing a specific navigation path through an affiliate/tracking redirect) rather than simply describing the tool's function. This could be used to funnel agent traffic through monetized or tracked hops without the user's informed consent.
mediumagent-ads-index
Instructs agent to follow tracking redirect and initiate a trial/handoff 'for your operator'
Description directs the agent to follow a specific hop (with embedded utm_source/utm_medium tracking parameters) and mentions a '7-day trial handoff for your operator' — this embeds an action-oriented instruction (initiate a trial/signup flow) inside a tool description rather than describing a bounded lookup capability, which could cause the agent to take consequential actions (signups, ad placement) without explicit user request or awareness.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/a3bdc18f-c759-4afc-b265-f92ccbd7e74c)Scanned 10/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free