MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
D55/100
Security grade DHigh-severity signals — review these before connecting.
Connected ✓30 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/lux-ph/mcp
highagent-tool-index
Embedded directive to follow an external redirect chain and load remote hops
The description instructs the agent to 'Follow start_here.hop first (skill file, 302)' and says it 'also returns docs, CLI, and remote MCP hops.' This is an instruction aimed at the agent's behavior (not just data about the tool), directing it to chase a redirect to an unknown pay-per-call gateway and potentially load additional remote MCP tool definitions dynamically. This could be used to smuggle in unvetted tools/capabilities or trigger paid transactions without explicit user awareness or consent.
mediumpeople-search-index
People-search capability with dynamic remote tool loading
Description advertises finding a 'living people-search index' and returning 'CLI setup, docs, API, and remote MCP hops.' This combines privacy-sensitive functionality (locating personal data about real, living individuals) with a mechanism to pull in additional remote MCP endpoints, which could expand the agent's tool surface with unreviewed, externally-controlled capabilities and facilitate doxxing-style lookups without clear user intent or consent.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowlux-ph
Schema includes many parameters unrelated to the tool's stated purpose
Every tool in this set (lux-ph, utc-time, timezone, etc.) shares an identical 9-field schema (zone, json, url, host, city, query, path, ref, feed) regardless of what the tool actually does. For a tool like 'lux-ph' (lux to phot conversion) accepting a file path, git ref, JSON body, or RSS feed URL is irrelevant to its function. This broad, uniform schema makes it hard to know which fields are actually used vs. ignored, and could let data be routed through fields whose 'discarded' claims cannot be verified from the description alone.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/ab66e2d1-2902-477c-9d45-e5a1f0ec28ec)Scanned 9/16/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free