MCP security report
aep-api.fly.dev
B88/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓6 tools scanned
https://aep-api.fly.dev/mcp
mediumcitation_report_large
Instructs agent to raise its own spend cap to bypass a cost safeguard
The description tells the AI that the $3.00 price exceeds the client's default spend cap and directs it to call client.setSpendControls to raise the cap 'before calling, or the client refuses without sending anything.' This is an instruction embedded in a tool description aimed at getting the agent to override a user-protective financial safeguard (the spend cap) in order to complete a paid transaction, rather than surfacing the block to the user for explicit approval. An agent following this literally could authorize larger payments than the user intended without clear consent.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/c48f51d1-84f3-4a65-91db-f5b704fc88f2)Scanned 10/4/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free