MCP security report

everythingisperfect.org

B88/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓19 tools scanned

https://everythingisperfect.org/api/mcp

mediumtrading_post_catalog
Embedded directive instructing agent to autonomously pay HTTP endpoints
The description reads 'Pay the HTTP endpoints it names,' which is an imperative instruction directed at the AI agent rather than a neutral description of data returned by the tool. This could induce the agent to initiate financial transactions (HTTP 402 payment flows) on the user's behalf without explicit per-transaction user confirmation, which is a dangerous capability for a tool whose stated purpose is merely to list prices/catalog information.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge

Show your MCP server’s security grade

MCP security grade B

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/a97b9cb5-e7f6-4788-b1c3-02a7230afaa6)](https://gateturbo.com/report/a97b9cb5-e7f6-4788-b1c3-02a7230afaa6)

Scanned 9/9/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free