MCP security report

api.algovault.com

B85/100
Security grade BNo obvious red flags in the tools we could see.
Connected ✓8 tools scanned

https://api.algovault.com/mcp

lowscan_trade_calls
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowscan_funding_arb
Explicit targeting of 'Claude' in description text
The description reads '...AI trading signal for crypto quant and Claude trading agents.' Naming a specific AI model inside a tool description is unusual and suggests an attempt to game semantic-similarity/tool-selection heuristics used by Claude-based agents rather than describing functionality. Not directly harmful, but worth flagging as a manipulation-adjacent pattern.
lowget_trade_call
Heavy keyword stuffing across tool descriptions
Several tools (get_trade_call, get_trade_signal, get_market_regime, scan_funding_arb, scan_trade_calls) repeat phrases like 'crypto quant', 'AI trading signal', 'multi-exchange', 'Buy sell hold' in nearly every field description, including parameter descriptions where such phrases are unnecessary (e.g. exchange enum, timeframe enum). This pattern looks like SEO-style stuffing intended to bias embedding-based tool retrieval/selection rather than to clarify tool behavior. Not malicious on its face, but it is a manipulation vector worth monitoring since it could cause the agent to over-select these tools regardless of actual fit.
lowget_trade_signal
Duplicate/alias tool increases tool-selection surface
get_trade_signal is explicitly described as a full alias of get_trade_call with identical schema and behavior. While disclosed transparently ('[ALIAS]... Prefer get_trade_call'), maintaining two functionally identical tools increases the chance an agent calls the less-preferred one, and duplicate tools can be used adversarially in other contexts to shadow or override a canonical tool. No current malicious intent detected, but flagged as an unusual pattern worth review.
lowsearch_knowledge
Directive telling agent to call this tool before others
Description states 'Call this BEFORE other tool calls to confirm parameter usage and avoid hallucinating tool shapes.' This is an instruction aimed at steering the agent's tool-call ordering. It appears benign and consistent with the tool's stated purpose (a knowledge lookup to reduce hallucination), but embedding directive language about call order in a tool description is a pattern that could be abused elsewhere to manipulate agent behavior, so it is noted for awareness.
Embed this badge

Show your MCP server’s security grade

MCP security grade B

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/ba650617-fef2-4501-b6aa-529cc0770da1)](https://gateturbo.com/report/ba650617-fef2-4501-b6aa-529cc0770da1)

Scanned 9/8/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free