MCP security report
ainetcafe.com
D49/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓14 tools scanned
https://ainetcafe.com/mcp/dev?s=registry
mediumredact_text
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumjwt_decode
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediummake_qr
Encodes arbitrary input text into an external third-party URL
The description states 'Stateless URL form: https://ainetcafe.com/i/qr/<text>' meaning whatever text is passed to this tool (which could include sensitive data, secrets, or PII if the agent is asked to QR-encode such content) is embedded directly into a URL sent to a third-party domain (ainetcafe.com) outside the user's control. If an agent uses this tool on sensitive strings (e.g., a private URL with a token, an address, or a secret), that data is transmitted to and potentially logged by an external service without explicit user consent or warning in the tool description.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowscreenshot_url
Broad URL-fetching capability without input constraints, permissive schema
The tool fetches and renders arbitrary URLs including any 'width' parameter, and its input_schema uses additionalProperties:true with untyped url/width fields. This could be leveraged for SSRF-style requests against internal/private network addresses (e.g., http://169.254.169.254 or localhost services) since there is no indication of URL validation or restriction to public web content. Not inherently malicious but broader than needed and worth constraining.
lowjson_format
Overly permissive schema (additionalProperties: true, untyped fields)
Input schema declares 'json' and 'url' fields with no type constraints and additionalProperties:true, allowing arbitrary extra parameters to be passed through unchecked. Not a direct exploit but increases risk of unexpected behavior or injection of unvalidated data into downstream processing.
lowtimezone_convert
Permissive schema (additionalProperties: true)
Schema allows arbitrary additional properties beyond the documented from/to/time fields, which is looser than necessary for a simple conversion utility.
lowunit_convert
Permissive schema (additionalProperties: true)
Schema allows arbitrary additional properties beyond value/from/to, which is looser than necessary for a simple conversion utility.
lowsql_from_description
Permissive schema (additionalProperties: true, untyped fields)
The 'request' and 'dialect' fields are untyped and additionalProperties is true, allowing arbitrary extra data to be passed with no validation; low risk but inconsistent with the stricter schemas used by most other tools in this set.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/c0d1445b-24e5-4bdb-add5-5bab6d254454)Scanned 9/6/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free