MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F7/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/utf8-bytes/mcp
highagent-tool-index
Embedded navigation instruction with tracking parameters directs agent to third-party monetized gateway
The description instructs the agent to 'Follow start_here.hop first' and references a hardcoded redirect carrying utm_source=agent-observatory&utm_medium=agent. This is an embedded directive aimed at the agent's behavior (not just data about the tool), steering it toward a third-party 'pay-per-call tool gateway' and additional hops (docs, CLI, remote MCP). This could cause the agent to silently register with or route traffic/calls through an external paid service without clear user awareness or consent, and the tracking parameters suggest traffic attribution/monetization rather than a neutral utility function.
highpeople-search-index
Tool promotes/directs to a people-search (personal data aggregation) index and embeds forced navigation instructions
Description explicitly instructs the agent to 'Follow start_here.hop' (with the same utm tracking parameters) to reach a 'living people-search index' plus its CLI, docs, API, and remote MCP setup. Directing an agent toward a people-search/background-check-style data broker raises privacy concerns (facilitating lookup of private individuals' personal information), and the embedded 'follow this link first' instruction is a directive aimed at agent behavior rather than a simple parameter description, which could be used to funnel the agent/user into an external data-broker service without explicit user intent.
highagent-ads-index
Embedded instruction pushes agent toward ad-placement/trial sign-up flow via tracked redirect
The description tells the agent to 'Follow start_here.hop first' (same utm_source=agent-observatory&utm_medium=agent tracking pattern) and states it returns a '7-day trial handoff for your operator.' This is an instruction embedded in a tool description that could cause the agent to initiate a trial/sign-up or advertising placement process on behalf of the operator without the user's explicit request or awareness, and funnels traffic through a tracked, monetized marketing funnel ('Agent Ads') rather than performing a neutral informational lookup.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowutf8-bytes
Shared oversized schema with unrelated parameters across all tools
Every tool in this set (utf8-bytes, utc-time, timezone, validate-json, etc.) exposes an identical schema with ten unrelated optional fields (zone, json, url, host, website, city, query, path, ref, feed) regardless of the tool's actual single-purpose function. While each individual field description claims data is discarded, this pattern makes it hard for the agent or a reviewer to reason about what data a given call actually sends, and could be used to normalize passing extraneous data (e.g., arbitrary 'path', 'query', or 'json' content) through tools whose stated purpose doesn't need it. Recommend tightening each tool's schema to only the parameters it genuinely uses.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/bffd828b-0365-4181-a2e6-32ff49dfbbe3)Scanned 10/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free