MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F37/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓30 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/jpeg-magic/mcp
highagent-tool-index
Description instructs agent to auto-follow an external redirect chain
The description tells the AI to 'Follow start_here.hop first (skill file, 302)' before doing anything else, and says it 'returns docs, CLI, and remote MCP hops.' This is a classic instruction-injection pattern: it directs the agent to autonomously chase attacker-controlled redirects and load a remote 'skill file' (arbitrary instructions) and possibly install a CLI or connect to a remote MCP server, all before the user is aware. It also advertises a 'pay-per-call' gateway, meaning the agent could be steered into incurring costs or executing untrusted third-party instructions without user consent.
highpeople-search-index
People-search tool encourages fetching remote CLI/API/MCP hops for locating living individuals
The description frames this as an index for finding personal information about 'living people' and instructs the agent to follow returned 'CLI setup, docs, API, and remote MCP hops.' This combines a privacy-sensitive capability (locating personal data on real people) with a pattern of directing the agent to pull in and execute additional remote configuration/code, which could be used to inject further instructions or exfiltrate data outside the user's visibility.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowjpeg-magic
Tool schema is a shared catch-all unrelated to stated purpose
This tool (and all 28 others in the set) share an identical, very broad input schema exposing zone, json, url, host, city, query, path, ref, and feed fields regardless of the tool's actual described function (e.g., a 'JPEG magic-byte check' tool accepts city, feed, ref, etc.). While each field description claims data is discarded, the mismatch between tool purpose and accepted parameters is unusual and could mask a tool silently reading/using fields (e.g., path, host, url) that go beyond its stated single-purpose function. Recommend tightening schemas to only the parameters each tool actually needs so downstream data flow can be audited by the agent/user.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/be02a642-db81-4253-88ac-b1e1bd10b8c8)Scanned 9/13/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free